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STORAGE SWITCH FOR STORAGE AREA NETWORK 



10 
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Serial No. 10/051,396; 



35 



ENFORCING QUALITY OF SERVICE IN A STORAGE NETWORK 
Serial No. 10/051,339; 



WO 03/027886 



PCT/US02/30974 



-2- 

POOLING AND PROVISIONING STORAGE RESOURCES DM A STORAGE 
NETWORK, 

Serial No. 10/050,974; and 



5 LOAD BALANCING IN A STORAGE NETWORK, 
Serial No. 10/051,053. 



FIELD OF INVENTION 
10 [0003] The present invention relates to storage area networks (SANs). 

BACKGROUND 

[0004] The rapid growth in data intensive applications continues to fuel the 

demand for raw data storage capacity. As companies rely more and more on e- 

1 5 commerce, online transaction processing, and databases, the amount of information that 
needs to be managed and stored can be massive. As a result, the ongoing need to add 
more storage, service more users and back-up more data has become a daunting task. 
[0005] To meet this growing demand for data, the concept of the Storage Area 

Network (SAN) has been gaining popularity. A SAN is defined by the Storage 

20 Networking Industry Association (SNIA) as anetworic whose primary purpose is the 
transfer of data between computer systems and storage elements and among storage 
elements. Unlike connecting a storage device directly to a server, e.g., with a SCSI 
connection, and unlike adding a storage device to a LAN with a traditional interface such 
as Ethernet (e.g., aNAS system), the SAN forms essentially an independent network 

25 that does not tend to have the same bandwidth limitations as its direct-connect SCSI and 
NAS counterparts. 

[0006] More specifically, in a SAN environment, storage devices (e.g., tape 

drives and RAID arrays) and servers are generally interconnected via various switches 
and appliances. The connections to the switches and appliances are usually Fibre 
30 Channel. This structure generally allows for any server on the SAN to communicate with 
any storage device and vice versa. It also provides alternative paths from server to 
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storage device. In other words, if a particular server is slow or completely unavailable, 
another server on the SAN can provide access to the storage device. A SAN also 
makes it possible to mirror data, making multiple copies available and thus creating more 
reliability in the availability of data. When more storage is needed, additional storage 
5 devices can be added to the SAN without the need to be connected to a specific server; 
rather, the new devices can simply be added to the storage network and can be 
accessed from any point. 

[0007] An example of a SAN is shown in the system 100 illustrated in the 

functional block diagram of Fig. 1. As shown, there are one or more servers 102. 

1 0 Three servers 1 02 are shown for exemplary purposes only. Servers 1 02 are connected 
through an Ethernet connection to a LAN 1 06 and/or to a router 1 08 and then to a 
WAN 110, such as the Internet. In addition, each server 1 02 is connected through a 
Fibre Channel connection to each of a plurality of Fibre Channel switches 112 
sometimes referred to as the "fabric" of the SAN. Two switches 1 1 2 are shown for 

1 5 exemplary purposes only. Each switch 1 1 2 is in turn connected to each of a plurality of 
SAN appliances 1 14. Two appliances 1 14 are shown for exemplary purposes only. 
Each appliance is also coupled to each of a plurality of storage devices 116, such as tape 
drives, optical drives, or RAID arrays. In addition, each switch 112 and appliance 114 
is coupled to a gateway 118, which in turn is coupled to router 108, which ultimately 

20 connects to a Wide Area Network (WAN) 11 8, such as the Internet. Fig. 1 showsone 
example of a possible configuration of a SAN 119, which includes switches 1 12, 
appliances 1 14, storage devices 1 1 6, and gateways 118. Still other configurations are 
possible. Forinstance, one appliance may be connected to fewerthan all the switches. 
[0008] Appliances 1 14 perform the storage management of the SAN. When 

25 the appliance 114 receives data, it stores the data in a memory in the appliance. Then, 
with aprocessor (also in the appliance), analyzes and operates on the data in order to 
forward the data to the correct storage device(s). This store-and-forward process 
typically slows down data access. 
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[0009] While the appliances do perform some switching, because there may be 

a large number of servers (many more than three), and because each appliance has few 
ports (usually only two or four), switches 1 1 2 are needed to connect the many servers 
to the few appliances. Nevertheless, switches 1 12 have little built-in intelligence and 
5 merely forward data to a selected appliance 114. 

[001 0] One limitation of appliances is the fact that an appliance typically has 

very few ports, e.g., only two ports. As a result, the bandwidth available through the 
appliance can be limited. Adding ports to an appliance, although possible, is typically 
very expensive. Every one or two ports are supported by an expensive CPU or server 
1 0 card. So generally to add ports, entire file cards (which perform virtualization and store- 
and-forward functions) must be added to the device, which is usually very costly. In the 
alternative, appliances are simply added to the SAN, but again, this tends to be very 
costly. 

[001 1 ] In addition, SANs, usually in the appliances 1 14, generally perform a 

15 function known as 'Virtualization. Virtualization occurs when spabe on one or more 
physical storage devices is allocated to a particular user, but the physical location of that 
space remains unknown to the user. For instance, a user may access its company's 
"engineering storage space," ENG:, accessing and "seeing" the virtual space ENG: as 
he or she would access or "see" an attached disk drive. Nonetheless, the ENG: space 
20 may be divided over several physical storage devices or even fragmented on a single 
storage device. Thus, when a server requests a virtual device (e.g., ENG:) and block 
number, the appliance must determine the device(s) that physically correlate to the virtual 
device requested and direct the data accordingly. 

[0012] In general, SANs are formed using a single protocol to interconnect the 

25 devices. Although Fibre Channel is the most commonly used, Ethernet connections have 
also been used. Nonetheless, if both protocols are desired to be used, some kind of 
transition between the two protocols must occur. In such instances, a Fibre Channel 
SAN 1 1 9 is typically coupled to an Ethernet SAN 1 22 via a bridge 1 2 1 . To transition 
from one protocol to the other, a packet is received by the bridge and stored in memory. 
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Once the packet is stored in a memory, a processor operates on the packet to remove 
the headers of one protocol and build the headers of the other protocol, thereby 
constructing an entirely new packet. More specifically, referring to Fig. 2, when a 
request (which may be comprised of one or more packets) is received by bridge 121, 
5 it is received, for example, by a Host Bus Adapter (HB A) 202 over a Fibre Channel 
connection 204. The entire request is stored in memory 206 until a processor 208 is 
ready to analyze and operate on it, i.e., to rebuild the request in accordance with the 
outgoing protocol. Once the request has been operated on by the processor 208, the 
request is sent to the Network Interface Card (NIC) 2 1 0 and then out over the ethernet 

1 0 connection 212. Of course, the same process could occur vice versa (ethernet to fibre 
channel) . Hence, the transition between protocols requires signific ant memory and 
processor resources, whichnot only cause delays in transmitting data but also increase 
the cost of the system in both money and real estate. Nonetheless, the only alternative 
currently available is to keep the protocols isolated on distinct networks. 

15 [0013] Gateways 118 (Fig. 1), in addition to connecting a SAN to a WAN, are 

often used to connect two or more SANs together. Gateways usually do not transition 
the various protocols, but rather encapsulate the data in IP packets, as is known in the 
art. Nonetheless, when multiple SANs are connected, there must be a unique address 
for each connected device. However, although the IP protocol contains 32 bits for 
20 addressing, the Fibre Channel protocol only contains 24 bits. Hence, because most 
SANs use Fibre Channel, scalability can be a problem despite the use of a gateway, 
limiting use of SANs over the Internet. 

[0014] Although" SANs were introduced several years ago, interoperability 

problems, lack of available skills, and high implementation costs remain major obstacles 
25 to widespread use. For instance, SANs as they currently exist have high deployment 
costs and high management costs. Referring again to Fig. 1 , each switch, appliance, and 
gateway typically come from different vendors, creating a lack of management standards 
thathas resulted in the proliferation of vendor-specific management tools. As aresult, 
todeployaSAN,equipmentmustbepurchasedfrommultiplevendors. And, asshown 
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inFig. 1 , each switch, appliance, gateway, storage device, server, and router will have 
its own management, shown as management stations 1 20. Although independent 
physical management stations are shown, it is to be understood that independent 
management is frequently in the form of independent, vendor-specific software on a 
5 single computer but which software does not communicate with one another. As a 
result, there is no centralized management of the SAN and its management costs are high 
given that there are usually multiple management stations that frequently require many 
people to manage. 

10 SUMMARY 

[001 5] A storage switch in accordance with an embodiment of the invention is 

a highly scalable switch that allows the creation of a SAN that is easy to deploy and that 
can be centrally managed. Moreover, such a storage switch also allows the deployment 
of a global infrastructure, allowing the resources of the SAN, such as storage devices, 

15 to essentially be positioned anywhere on the globe. Further, a storage switch in 
accordance with the invention allows a multi-protocol SAN, e.g., one that includes both 
iSCSI(a recently introduced protocol carried over an Ethernet connection) or Fibre 
Channel, and to process any data packets at 'Svire speed" - that is, without introducing 
any more latency that would be introduced by a switch that merely performed switching 

20 or routing functions - and thus a switch in accordance with the invention has a high 
bandwidth. Typically to process data at wire speed, a storage switch in accordance with 
an embodiment of the invention will not buffer packets, unlike that done conventionally. 
Thus, compared to conventional practices, an architecture in accordance with an 
embodiment of the invention allows the required time to process apacket to be minimal. 

25 [0016] More specifically, a switch in accordance with the invention offers 

virtualization and translation services at wire speed. To perform such wire-speed 
processing, "intelligence" is distributed at every port of the switch linecard. Each 
linecard is further able to classify a packet and thus separate data packets from control 
packets. Because of the distributed intelligence, each linecard also performs 
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virtualization (converting a virtual address to a physical one) and protocol translation 
(converting an incoming packet of a first protocol to an outgoing packet of a second 
protocol) when necessary on the data packets and can do so without a user or a server 
having to be aware of or involved in the necessity for the virtualization or translation. 
5 Having distributed intelligence allows many linecards to be made that are less expensive 
than traditional CPU or server cards, allowing for further ease of scalability of the 
storage switch, e.g., to accommodate more ports. 

[001 7] In addition, each switch is able to o ffer serverless storage services such 

as mirroring, mirroring over a slow link, snapshot, virtual target cloning (replication), third 
10 party copy, periodic snapshot and backup, and restore. Once the switch receives a 
request for suchservices, it is able to perform those services without the assistance of 
any other device, such as a server or management station. 

BRIEF DESCRIPTION OF THE DRAWINGS 
1 5 [001 8] The present invention is described with respect to particular exemplary 

embodiments thereof and reference is accordingly made to the drawings in which: 
[0019] Fig. 1 is a generalized function block diagram of a SAN in accordance 

with a conventional system; 

[0020] Fig. 2 is a generalized function block diagram of a device used for 

20 interfacing between protocols in accordance with conventional methodologies; 

[0021] Fig. 3 is a generalized function block diagram of a SAN system using a 

storage switch in accordance with an embodiment of the invention; 

[0022] Fig. 4 is a generalized function block diagram of another embodiment 

of a system using a storage switch in accordance with an embodiment of the invention; 
25 [0023] Fig. 5 is a generalized functionblock diagram of yet another embodiment 

of a system using a storage switch in accordance with an embodiment of the invention; 

[0024] Fig. 6 is a generalized function block diagram of a storage switch in 

accordance with an embodiment of the invention; 
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[0025] Fig. 7 is a generalized function block diagram of a linecard used in a 

storage switch in accordance with an embodiment of the invention; 
[0026] Fig. 7a is a generalized block diagram of a Virtual Target Descriptor 

used in a storage switch in accordance with an embodiment of the invention; 
5 [0027] Fig?. 8a-8e are generalized block diagrams of various iSCSI PDUs, as 

are known in the art; 

[0028] Figs. 8f-8i are generalized block diagrams of Fibre Channel Protocol 

(FCP) frames and payloads, as are known in the art; 

[0029] Figs. 9a is a flow diagram illustrating a classification process of iSCSI 

1 0 packets in the ingress direction as the process occurs in the PACE, in accordance with 
an embodiment of the invention; 

[0030] Figs. 9b is a flow diagram illustrating a classification process of iSCSI 

packets in the egress direction as the process occurs in the PACE, in accordance with 
an embodiment of the invention; 
1 5 [0031] Figs. 1 0a and 1 0b illustrate block diagrams of TCP packets as they 

enter a storage switch in accordance with the invention and how the packets are 
modified for use within the storage switch; 

[0032] Fig. 1 1 is a generalized block diagram of a Local Header used in a 

storage switch in accordance with an embodiment of the invention; 
20 [0033] Figs. 12a is a flow diagram illustrating a classification process ofFCP 

frames in the ingress direction as the process occurs in the PACE, in accordance with 
an embodiment of the invention; 

[0034] Figs. 12bisaflow diagram illustrating a classification process ofFCP 

frames as in the egress direction as the process occurs in the PACE, in accordance with 
25 an embodiment of the invention; 

[0035] Figs. 1 3a is a flow diagram illustrating a classification process in the 

ingress direction as the process occurs in the PPU, in accordance with an embodiment 
of the invention; 
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[0036] Figs. 1 3b is a flow diagram illustrating a classification process in the 

egress direction as the process occurs in the PPU, in accordance with an embodiment 
of the invention; 

[0037] Fig. 1 4 is a flow diagram illustrating a virtualization process in the ingress 

5 direction for command packets or frames, in accordance with an embodiment of the 
invention; 

[0038] Fig. 1 5 is a flow diagram illustrating a virtualization process in the egress 

direction for command packets or frames, in accordance with an embodiment of the 
invention; 

10 [0039] Figs. 14aand 15aillustrateblockdiagramsofthelocalheaderandtask 

control blocks (ITCB and ETCB) during a virtualization process, where Fig. 1 4a shows 
the header and ITCB for a command packet in the ingress direction (from the initiator 
server/port) and where Fig. 15a shows a header and ETCB for a command packet in 
the egress direction (from the fabric/traffic manager); 

15 [0040] Fig. 16isaflowdiagimnillustratingaviituali^ 

direction for R2T/XFRRDY packets or frames, in accordance with an embodiment of 
the invention; 

[0041 ] Fig. 17 is a flow diagram illustrating a virtualization process in the egress 

direction for R2T/XFR __RD Y packets or frames, in accordance with an embodiment of 

20 the invention; 

[0042] Figs. 16aand 17aillustrate block diagrams ofthe local header and task 

control blocks (ITCB and ETCB) during a virtualization process, where Fig. 1 6a shows 
. the header and ETCB for a R2T/XFR_RDY packet in the ingress direction (from the 
target storage device/port) and where Fig, 17a shows a header and ITCB for a 

25 R2T/XFR_RDY packet in the egress direction (from the fabric/traffic manager); 

[0043] Fig. 18 is a flow diagram illustrating a virtualization process in the ingress 

direction for write data packets or frames, in accordance with an embodiment ofthe 
invention; 
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[0044] Fig. 19 is a flow diagram iUustat^ 

direction for write data packets or frames, in accordance with an embodiment of the 
invention; 

[0045] Figs. 18aand 19a illustrate block diagrams ofthe local header and task 

5 control blocks (TTCB and ETCB) during a visualization process, where Fig. 1 8a shows 
the header and ITCB for a write data packet in the ingress direction (from the intiator 
server/port) and where Fig. 1 5a shows a header and ETCB for a write data packet in 
the egress direction (from the fabric/traffic manager); 

[0046] Fig. 20 is a flow diagram illustrating a visualization process in the ingress 

1 0 direction for read data packets or frames, in accordance with an embodiment of the 
invention; 

[0047] Fig. 2 1 is a flow diagram illustrating a visualization process in the egress 

direction for read data packets or frames, in accordance with an embodiment of the 
invention; 

1 5 [0048] Figs. 20a and 21a illustrate block diagrams of the local header and task 

control blocks (TTCB and ETCB) during a visualization process, where Fig. 20a shows 
the header and ETCB for a read data packet in the ingress direction (from the target 
storage device/poS) and where Fig. 21a shows a header and ITCB for a read data 
packet in the egress direction (from the fabric/traffic manager); 

20 [0049] Fig. 22 is a flow diagram iUustrati^ 

direction for response packets or frames, in accordance with an embodiment of the 
invention; 

[0050] Fig. 23 is a flow diagram illustrating a visualization process in the egress 

direction for response packets or frames, in accordance with an embodiment of the 
25 invention; 

[0051] Figs. 22a and 23a illustrate block diagrams ofthe local header and task 

control blocks (TTCB and ETCB) during a visualization process, where Fig. 22a shows 
the header and ETCB for a response packet in the ingress direction (from the target 
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storage device/port) and where Fig. 23a shows a header and ITCB for a response 
packet in the egress direction (from the fabric/traffic manager); 
[0052] Fig. 24 is a flow diagram illustrating the general steps taken to perform 

storage services in accordance with an embodiment of the invention; 
5 [0053] Fig. 25 is a flow diagram illustrating the steps taken for the storage 

service of mirroring over a slow link in accordance with an embodiment of the invention; 
[0054] Fig. 26 is a flow diagram illustrating the steps taken for the storage 

service of snapshot in accordance with an embodiment of the invention; 
[0055] Fig. 27 is a flow diagram illustrating the steps taken for the storage 

10 service of cloning in accordance with an embodiment of the invention; and 

[0056] Fig. 28 is a flow diagram illustrating the steps taken for the storage 

service of third party copy in accordance with an embodiment of the invention. 

DETAILED DESCRIPTION 

15 [0057] A system 300 that includes a storage switch in accordance with the 

invention is illustrated in Fig. 3 . As shown, such a system is greatly simplified over 
existing systems. In one embodiment, system 300 includes a plurality of servers 302. 
Forpurposes of illustration only, three servers 302 are shown, although more or fewer 
servers could be used in other embodiments . Although not shown, the servers could 

20 also be coupled to a LAN. As shown, each server 302 is connected to a storage switch 
304. In other embodiments, however, each server 302 maybe connected to fewer than 
all of the storage switches 304present. The connections formed between the servers 
and switches can utilize any protocol, although in one embodiment the connections are 
either Fibre Channel or Gigabit Ethernet (carrying packets in accordance with the iSCSI 

25 protocol) . Other embodiments may use the Infiniband protocol, defined by Intel Inc., 
or other protocols or connections. In the embodiment illustrated, each switch is in turn 
connected to each of a plurality of storage devices or subsystems 306. Nonetheless, in 
other embodiments, each switch may be connected to fewer than all of the storage 
devices or subsystems 306. The connections formed between the storage switches and 
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storage devices can utilize any protocol, although in one embodiment the connections are 
either Fibre Channel or Gigabit Ethernet In some embodiments, one or more switches 
304 are each coupled to a Metropolitan Area Network (MAN) or Wide Area Network 
(WAN), such as the Internet 308 . The connection formed between a storage switch and 
5 a WAN will generally use the Internet Protocol (IP) in most embodiments. Although 
shown as directly connected to MAN/WAN 308, other embodiments may utilize a 
router (not shown) as an intermediary between switch 304 and MAN/WAN 308. In 
addition, respective management stations 3 1 0 are connected to each storage switch 304, 
to each server 302, and to each storage device 306. Although management stations are 

1 0 illustrated as distinct computers, it is to be understood that the software to manage each 
type of device could collectively be on a single computer. 
[0058] Fig. 4 shows an alternative embodiment of a system in accordance with 

the invention. In such an embodiment, two SANs 402, 404 are formed, each using one 
or more storage switches 304 in accordance with an embodiment of the invention. The 

1 5 SANs 402 and 404 are coupled through a WAN 308, such as the Internet, by way of 
switches 304. Connections 308 can be any standard or protocol, but in one 
embodiment will be Packet over SONET (PoS) or 10 Gigabit Ethernet. 
[0059] Fig. 5 shows still another embodiment of a system in accordance with 

the invention wherein switches 304 are coupled directly to one another. In any of the 

20 embodiments shown in Figs . 3 or 4, if more than one switch is used, those switches 
could be coupled as illustrated in Fig. 5. 

[0060] A storage switch in accordance with the invention enables a centralized 

management of globally distributed storage devices, which can be used as shared storage 
pools, instead ofhaving a huge number of management stations distributed globally and 
25 an army of skilled management personnel. Such a storage switch is an "intelligent" 
switch, and, as can be seen by comparing Fig. 3 to Fig. 1, the functions of switch, 
appliance, and gateway have effectively been united in a storage switch 304 in 
accordance with an embodiment of the invention. Such a storage switch 304, in addition 
to its switching function, provides the virtualization and storage services (e.g., miiroring) 
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that would typically be provided by appliances in conventional architectures, and it also 
provides protocol translation. A storage switch in accordance with some embodiments 
of the invention also performs additional functions (for instance, data security through a 
Virtual Private Network). Such additional functions include functions that are performed 
5 by other devices in conventional systems, such as load balancing, which is traditionally 
performed by the servers, as well as other functions not previously available in 
conventional systems. 

[0061 ] The intelligence of a storage switch in accordance with an embodiment 

of the invention is distributed to every switch port This distributed intelligence allows 

10 for system scalability and availability. 

[0062] Further, the distributed intelligence allows a switch in accordance with 

an embodiment of the invention to process data at "wire speed," meaning that a storage 
switch 3 04 introduces no more latency to a data packet than would be introduced by 
a typical network switch (such as switch 1 12 in Fig. 1). Thus, "wire speed" for the 

15 switch is measured by the connection to the particular port. Accordingly, in one 
embodiment having OC-48 connections, the storage switch can keep up with an OC-48 
speed (2 . 5 bits per ns) . A two Kilobyte packet (with 1 0 bits per byte) moving at OC- 
48 speed takes as little as eight microseconds coming into the switch. A one Kilobyte 
packet takes as little as four microseconds. A minimum packet of 100 bytes only 

20 elapses merely 400 ns. Nonetheless, when the term "wire-speed" processing is used 
herein, it does not mean that such processing needs as few as 400 ns to process a 1 00- 
byte packet. However, it does mean that the storage switch can handle the maximum 
Ethernet packet of 1500 bytes (with ten-bit encoding, so that abyte is ten bits) at OC- 
48 speed, i.e., in about 6 (is (4 |ns per Kilobyte or 2.5 bits perns), in one embodiment. 

25 In embodiments witha 1 Gb Ethernet port, where processingis generally defined as one 
bit per nanosecond, "wire-speed" data for that port will be 10 (is per Kilobyte, 
indicating that the switch has up to IOjis to process a Kilobyte. In embodiments with 
a 2 Gb Fibre Channel port, 'Svire speed" will be 5 ^s per Kilobyte. Still other 
embodiments may process data at ten Gigabit Ethernet or OC- 1 92 speeds or faster. 
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[0063] As used herein, < Virtualization" essentially means the mapping of a virtual 

target space subscribed to by a user to a space on one or more physical storage target 
devices. The terms * Virtual" and "virtual target" come from the fact that storage space 
allocated per subscription can be anywhere on one or more physical storage target 
5 devices connecting to a storage switch 304. The physical space can be provisioned as 
■ a "virtual target" which may include one or more "logical units" (LUs). Each virtual 
target consists of one or more LUs identified with one or more LU numbers (LUNs), 
which are frequently used in the iSCSI and FC protocols . Each logical unit, and hence 
each virtual target, is generally comprised of one or more extents - a contiguous slice of 

1 0 storage sp ace on a physical device. Thus, a virtual target may occupy a whole storage 
device (one extent), a part of a single storage device (one or more extents), orparts of 
multiple storage devices (multiple extents). The physical devices, the LUs, the number 
of extents, and their exact locations are immaterial and invisible to a subscriber user. 
[0064] While the storage space may come from a number of different physical 

1 5 devices, each virtual target belongs to one or more domains. Only users of the same 
domain are allowed to share the virtual targets in their domain. A domain-set eases the 
management of users of multiple domains. The members of a domain set can be 
members of other domains as well. But a virtual target can only be in one domain in an 
embodiment of the invention. 

20 [0065] Fig. 6 illustrates a function block diagram of a storage switch 304 in 

accordance with an embodiment of the invention. In one embodiment, the storage switch 
304 includes aplurality oflinecards 602, 604, and 606, a plurality of fabric cards 608, 
and two system control cards 610, each of which will be described in further detail 
below; 

25 [0066] System Control Cards. Each of the two System Control Cards (SCCs) 

610 connects to every line card 602, 604, 606 . In one embodiment, such connections 
are formed by I 2 C signals, which are well known in the art, and through an Ethernet 
connection with the SCC. The SCC controls power up and monitors individual 
linecards, as well as the fabric cards, with the I 2 C connections. Using inter-card 
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communication over the etliernet connections, the SCC also initiates various storage 
services, e.g., snapshot and replicate, to be discussed further later. 
[0067] In addition the SCC maintains a database 612 that tracks configuration 

information for the storage switch as well as all virtual targets and physical devices 
5 attached to the switch, e.g., servers and storage devices. In addition, the database 
keeps information regarding usage, error and access data as well as information 
regarding different domains and domain sets of virtual targets and users. The records 
of the database are referred to herein as "objects." Each initiator (e.g., a server) and 
target (e.g., a storage device) has a World Wide Unique Identifier (WWUI), which are 
1 0 known in the art The database is maintained in a memory device within the SCC, which 
in one embodiment is formed from flash memory, although other memory devices will 
also be satisfactory. 

[0068] The storage switch 304 can be reached by a management station (3 1 0) 

through the SCC 6 1 0 using an ethemet connection. Accordingly, the SCC also includes 
15 an additional Ethemet port for connection to amanagement station. An administrator 
at the management station can discover the addition or removal of storage devices or 
virtual targets, as well as query and update virtually any object stored in the SCC 
database 612. 

[0069] Of the two SCCs 610, one is the main operating SCC while the other 
20 is a backup, remaining synchronized to the actions in the storage switch, but not directly 
controlling them. The SCCs operate in ahigh availability mode wherein if one SCC fails, 
the other becomes the primary controller. 

[0070] Fabric Cards. In one embodiment of switch 304, there are three fabric 

cards 608, although other embodiments could have more or fewer fabric cards. Each 
25 fabric card 608 is coupled to each of the linecards 602, 604, 606 in one embodiment 
and serves to connect all of the linecards together, hi one embodiment, the fabric cards 
608 can each handle maximum traffic when all linecards are populated. Such traffic 
loads handled by each linecard are up to 1 60 Gbps in one embodiment although other 
embodiments could handle higher or lower maximum traffic volumes. If one fabric card 
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608 fails, the two surviving cards still have enough bandwidth for the maximum possible 
switch traffic: in one embodiment, each linecard generates 20 Gbps of traffic, 1 0 Gbps 
ingress and 10 Gbps egress. However, under normal circumstances, all three fabric 
cards are active at the same time. From each linecard, the data traffic is sent to any one 
5 of the three fabric cards that can accommodate the data. 

[0071] Linecards. The linecards form connections to servers and to storage 

devices. In one embodiment, storage switch 304 supports up to sixteen linecards 
although other embodiments could support a different number. Further, in one 
embodiment, three different types of linecards are utilized: Gigabit Ethernet (GigE) cards 

1 0 602, Fibre Channel (FC) cards 604, and WAN cards 606. Other embodiments may 
include more or fewer types of linecards. The GigE cards 602 are for Ethernet 
connections, connecting in one embodiment to either iSCSI servers or iSCSI storage 
devices (or other Ethernet based devices). The FC cards 604 are for Fibre Channel 
connections, connecting to either Fibre Channel Protocol (FCP) servers or FCP storage 

1 5 devices. The WAN cards 606 are for connecting to a MAN or WAN. 

[0072] Fig. 7 illustrates a functional block diagram of a generic line card 700 

used in one embodiment of a storage switch 304 in accordance with the invention. The 
illustration shows those components that are common among all types oflinecaids, e.g., 
GigE 602, FC 604, or WAN 606. In other embodiments other types of linecards can 

20 be utilized to connect to devices using other protocols, such as Infiniband. The 
differences in the linecards are discussed subsequently. 

[0073] Ports . Each linecard 700 includes a plurality of ports 702. The 

ports form the linecard 5 s connections to either s ervers or storage devices . Ei ght ports 
are shown in the embodiment illustrated, but more or fewer could be used in other 
25 embodiments. For example, in one embodiment each GigE card can support up to eight 
1 Gb Ethernet ports, each FC card can support up to either eight 1 Gb FC ports or four 
2Gb FC ports, and each WAN card can support up to four OC-48 ports or two OC- 
1 92 ports. Thus, in one embodiment, the maximum possible connections are 1 28 ports 
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per switch 3 04 . The ports of each linecard are full duplex and connect to either a server 
or other client, or to a storage device or subsystem. 

[0074] In addition each port 702 has an associated memory 703 . Although only 

one memory device i s shown connected to one port, it is to be understood that each port 
5 may have its own memory device or the ports may all be coupled to a single memory 
device. Only one memory device is shown here coupled to one port for clarity of 
illustration. 

[0075] Storage Processor Unit . In one embodiment, each port is 

associated with a Storage Processor Unit (SPU) 70 1 . The SPU rapidly processes the 
10 data traffic allowing for wire-speed operations. In one embodiment, the SPU includes 
several elements: a Packet Aggregation and Classification Engine (PACE) 704, aPacket 
Processing Unit (PPU) 706, an SRAM 705, and aCAM 707. Still other embodiments 
may use more or fewer elements or could combine elements to obtain the same 
functionality. 

1 5 [0076] PACE . Each port is coupled to a Packet Aggregation 

and Classification Engine (PACE) 704. As illustrated, the PACE 704 aggregates two 
ports into asingle data channel having twice the bandwidth. Forinstance, the PACE 
704 aggregates two 1 Gb ports into a single 2Gb data channel. The PACE classifies 
each received packet into a control packet or a data packet, as will be discussed further 

20 below. ControlpacketsaresenttotheCPU714forprocessing,viabridge716. Data 
packets are sent to a Packet Processing Unit (PPU) 706, discussed below, with a local 
header added. In one embodiment the local header is sixteen bytes resulting in a data 
"cell" or "local packet" of 64 bytes ( 1 6 bytes ofheader and 48 bytes of payload) . The 
local header is used to carry information and used internally by switch 204. The local 

25 header is removed before the packet leaves the switch. Accordingly, as used herein a 
"cell" or a 1 'local packet 5 ' is a transport unit that is used locally in the switch that includes 
a local header and the original packet (in some embodiments, the original TCP/IP 
headers are also stripped from theoriginal packet). Nonetheless, not all embodiments 
of the invention will create a local header or have "local packets" (cells) that differ from 
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external packets. Accordingly, the term "packet" as used herein can refer to either 
"local" or "external" packets. 

[0077] The classification function helps to enable a switch to perform storage 

virtualization and protocol translation functions at wire speed without using a store-and- 
5 forward model of conventional systems. Each PACE has a dedicated path to a PPU 
706 while all four PACEs in the illustrated embodiment share a path to the CPU 714, 
which in one embodiment is a 104MHz/32 (3.2 Gbps) bit data path. 
[0078] Packet Processing Unit CP¥U). The PPU 706 performs 

virtualization and protocol translation on-the-fly, meaning, the cells (local packets) are 

10 not buffered for such processing- It also implements switch-based storage service 
functions, described later. The PPU is capable, in one embodiment, of moving cells at 
OC-48 speed or 2.5 Gbps for both the ingress and egress directions, while in other 
embodiments it can move cells at OC-192 speeds or 10 Gbps. The PPU in one 
embodiment includes an ingress PPU 706] and an egress PPU 706 2 , which both run 

1 5 concurrently. The ingress PPU 706 , receives incoming data from PACE 704 and sends 
data to the Traffic Manager 708 while the egress PPU 7O62 receives data from Traffic 
Manager 708 and sends data to a PACE 704. 

[0079] A large number of storage connections (e.g., server to virtual target) can 

be established concurrently at each port. Nonetheless, each connection is unique to a 

20 virtual target and can be uniquely identified by a TCP Control B lock Index (in the case 
of iSCSI connections) and a port number. When a connection is established, the CPU 
714 of the linecard 700 informs the PPU 706 of an active virtual target by sending it a 
Virtual Target Descriptor (VTD) for the connection. The VTD includes all relevant 
information regarding the connection and virtual target that the PPU will need to properly 

25 operate on the data, e.g., perform virtualization, translation, and various storage services. 
The VTD is derived from an object in the SCC database and usually contains a subset 
of information that is stored in the associated object in the SCC database. An example 
of the fields in a VTD in one embodiment of the invention are shown in Fig. 7a. 
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Nonetheless, other embodiments of the invention may have a VTD with more, fewer, or 
different fields . 

[0080] To store the VTDs and have quick access to them, in one embodiment 

the PPUs 706 are connected to an SRAM 705 and CAM 707. SRAM 705 stores a 
5 VTD database. A listing ofVTD identifiers (VTD IDs), or addresses, is also maintained 
in the PPU CAM 707 for quick accessing of the VTDs. The VTD IDs are indexed 
(mapped) using a TCP Control Block Index and a LUN. In addition, for IP routing 
services, the CAM 707 contains a route table, which is updated by the CPU when 
routes are added or removed. 

1 0 [0081 ] Note that although only one CAM and an SRAM are illustrated as 

connected to one PPU, this is to maintain clarity of the illustration. In various 
embodiments, each PPU will be connected with its own CAM and SRAM device, or 
the PPUs will all be connected to a single CAM and/or SRAM. 
[0082] For each outstanding request to the PPU (e.g., reads or writes), a task 

1 5 control block is established in the PPU SRAM 707 to track the status of the request. 
There are ingress task control blocks (TTCBs) tracking the status of requests received 
by the storage switch on the ingress PPU and egress task control blocks (ETCBs) 
tracking the status of requests sent out by the storage switch on the egress PPU. For 
each virtual target connection, there can be a large number of concurrent requests, and 

20 thus many task control blocks. Task control blocks are allocated as a request begins 
and freed as the request completes. 

[0083 ] Traffic Manager . There are two traffic managers (TMs) 708 on 

each linecard 700 : one TM for ingress traffic and one TM for egress traffic. The ingress 
TM receives packets from all four SPUs, in the form of multiple 64-byte data cells, in 
25 one embodiment. In such an embodiment, each data cellhas 1 6 bytes of local header 
and 48 bytes of payload. The header contains a FlowID that tells the TM the destination 
port of the cell. In some embodiments, the SPU may also attach a TM header to the cell 
prior to forwarding the cell to the TM. Either the TM or the SPU can also subdivide the 
cell into smaller cells for transmission through the fabric cards in some embodiments. 
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[0084] The ingress TM sends data cells to the fabric cards via a 1 28-bit 1 04 

Mhz interface 7 1 0 in one embodiment. The egress TM receives the data cells from the 
fabric cards and delivers them to the four SPUs. 

[0085] Both ingress and egress TMs have a large buffer 7 1 2 to queue cells 

5 (local packets) for delivery. Both buffers 712 for the ingress and egress TMs are 
64MB, which can queue a large number of packets. The SPUs can normally send cells 
to the ingress TM quickly as the outgoing flow of the fabric cards is as fast as the 
incoming flow. Hence, the cells are moving to the egress TM quickly. On the other 
hand, an egress TM may be backed up because the outgoing port is jammed or being 

10 fed by multiple ingress linecards. In such a case, a flag is set in the header of the 
outgoing cells to inform the egress SPU to take actions quickly. The egress TM sends 
a request to the ingress SPU to activate a flow control function. It is worth noting that, 
unlike communications traffic over the Internet, for storage traffic dropping a packet is 
unacceptable. Therefore, as soon as the amount of cells in the buffer exceeds a specified 

1 5 threshold, the SPU must activate its flow control function to slow down the incoming 
traffic to avoid buffer overflow. 

[0086] Fabric Connection. The fabric connection 710 converts the 

256-bit parallel signals of the TM (1 28 bits ingress and 128 bits egress, respectively), 
into a 1 6-bit serial interface (8-bit ingress and 8-bit egress) to the backplane at 160 

20 i Gbps. Thus the backplane is running at one sixteenth of the pins but sixteen times faster 
in speed. This conversion enables the construction of a high availability backplane at 
a reasonable cost without thousands of connecting pins and wires. Further, because 
there are three fabric cards in one embodiment, there are three high-speed connectors 
on each linecard in one embodiment, wherein the connectors each respectively connect 

25 the 8-bit signals to a respective one of the three fabric cards. Of course, other 
embodiments may not require three fabric connections 710. 
[0087] CPU. On every linecard there is a processor (CPU) 7 14, which 

in one embodiment is a PowerPC 750 Cxe. In one embodiment, CPU 7 14 connects 
to each PACE with a 3.2 Gb bus, via a bus controller 71 5 and a bridge 716. In 
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addition, CPU 714 also connects to each PPU, CAM and TM } however, in some 
embodiments this connection is slower at 40 Mbps . Both the 3 .2 Gb and 40 Mb paths 
allow the CPU to communicate with most devices in the linecard as well as to read and 
write the internal registers of every device on the linecard, download microcode, and 
5 send and receive control packets. 

[0088] The CPU on each linecard is responsible to initialize every chip at power 

up and to download microcode to the SPUs and each port wherever the microcode is 
needed. Once the linecard is in running state, the CPU processes the control traffic. For 
information needed to establish a virtual target connection, the CPU requests the 
10 information from the SCC, which in turn gets the information from an appropriate object 
in the SCC database. 

[0089] Distinction in Linecards - Ports. The ports in each type of linecard, e.g., 

GigE, FC, or WAN are distinct as each linecard only supports one type of port in one 
embodiment. Each type of port for one embodiment is described below. Of course 
1 5 other linecard ports could be designed to support other protocols, such as Infiniband in 
other embodiments. 

[0090] GigE Port. A gigabit Ethernet port connects to iSCSI servers and 

storage devices. While the GigE port carries all kinds of Ethernet traffic, the only 
network traffic generally to be processed by a storage switch 304 at wire speed in 

20 accordance with one embodiment of the invention is an iS CSI Packet Data Unit (PDU) 
inside a TCP/IP packet. Nonetheless, in other embodiments packets in accordance with 
other protocols (like Network File System (NFS)) carried over Ethernet connections 
may be received at the GigE Port and processed by the SPU and/or CPU. 
[0091 ] The GigE port receives and transmits TCP/IP segments for virtual targets 

25 or iS CSI devices. To establish a TCP connection for a virtual target, both the linecard 
CPU 714 and the SCC 610 are involved. When a TCP packet is received, and after 
initial handshaking is performed, a TCP control block is created and stored in the GigE 
port memory 703 . A VTD must also be retrieved from an obj ect of the SCC database 
and stored in the CPU SDRAM 705 for the purpose of authenticating the connection 
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and understanding the configuration of the virtual target. The TCP Control Block 
identifies a particular TCP session or iSCSI connection to which the packet belongs, and 
contains in one embodiment, TCP segment numbers, states, window size, and potentially 
other information about the connection. In addition, the TCP Control Block is identified 
5 by an index, referred to herein as the "TCP Control Block Index." A VTD for the 
connection must be created and stored in the SPU SRAM 705 . The CPU creates the 
VTD by retrieving fee VTD information stored in its SDRAM and originally obtained 
from the SCC database. A VTD ID is established in a list of VTD IDs in the SPU 
CAM 707 for quick reference to the VTD. The VTD ID is affiliated with and indexed 

10 by the TCP Control Block Index. 

[0092] When the port receives iSCSI PDUs, it serves essentially as a 

termination point for the connection, but then the switch initiates anew connection with 
the target. After receiving a packet on the ingress side, the port delivers the iSCSI PDU 
to the PACE with a TCP Control Block Index, identifying a specific TCP connection. 

15 For a non-TCP packet or a TCP packet not containing an iSCSI PDU, the port 
receives and transmits the packet without acting as a termination point for the 
connection. Typically, the port 702 communicates with the PACE 7 04 that an iSCSI 
packet is received or sent by using a TCP Control Block Index. When the TCP Control 
Block Index of a packet is -1, it identifies a non-iSCSI packet. 

20 [0093] FCPort. An FC port connects to servers and FC storage devices. The 

FC port appears as a fibre channel storage subsystem to the connecting servers, 
meaning, it presents a large pool of virtual target devices that allow the initiators (e.g., 
servers) to perform a Process Login (PLOGI or PRLI), as are understood in the art, to 
establish a connection. The FC port accepts the GID extended link services (ELSs) and 

25 returns a list of target devices available for access by that initiator (e.g., server). 

[0094] When connecting to fibre channel storage devices, the port appears as 

a fibre channel F-port, meaning, it accepts a Fabric Login, as is known in the art, from 
the storage devices and provides name service functions by accepting and processing 
the GID requests. 
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[0095] At the port initialization, the linecard CPU must go through both sending 

Fabric Logins, Process Logins, and GIDs as well as receive the same. The SCC 
supports an application to convert FC ELS's to iSNS requests and responses. As a 
result, the same database in the SCC keeps track both the FC initiators (e.g., servers) 
5 and targets (e.g., storage devices) as if they were iSCSI initiators and targets. 

[0096] When establishing an FC connection, unlike for a GigE port, anFC port 

does not need to create TCP control blocks or their equivalent; all the necessary 
information is available from the FC header. But, a VTD (indexed by a DJD) will still 
need to be established in a manner similar to that described for the GigE port. 

10 [0097] An FC port can be configured for 1Gb or 2Gb. As a 1Gb port, two 

ports are connected to a single PACE as illustrated in Fig. 7; but in an embodiment 
where it is configured as a 2Gb port, port traffic and traffic that can be accommodated 
by the SPU should match to avoid congestion at the SPU. The port connects to the 
PACE with a POS/PHY interface in one embodiment. Each port can be configured 

15 separately, i.e. one PACE may have two 1 Gb ports and another PACE has a single 2 
Gb port. 

[0098] WAN Ports. In embodiments that include a WAN linecard, the WAN 

linecard supports OC-48 and OC-192 connections in one embodiment. Accordingly, 
there are two types of WAN ports: OC-48 and OC-192. For OC-48, there is one port 

20 for each SPU. There is no aggregation function in the PACE, although there still is the 
classification function. A WAN port connects to SONET and works like a GigE port 
as it transmits and receives network packets such as ICMP, RIP, BPG, IP and TCP. 
Unlike the GigE port, a WAN port in one embodiment supports network security with 
VPN and IPSec that requires additional hardware components. 

25 [0099] Since OC-192 results in a faster wire speed, a faster SPU will be 

required in embodiments that support OC-192. 
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Switch-Based Storage Operations 

[0100] A storage switch in accordance with an embodiment of the invention 

performs various switch-based storage operations, including classification of packets, 
virtualization, and translation. These services are generally performed by the SPU. In 
5 one embodiment, every port has an SPU, enabling the processing of data traffic as fast 
as possible while passing control traffic to the CPU, which has the resources to handle 
the control traffic. As shown in Fig. 7, four SPUs share a single CPU supporting eight 
ports. Thus, minimum resources and overhead are used for data traffic, allowing a large 
number of low cost ports each with the intelligence to process storage traffic at wire 

10 speed. The SPU functions will be described in detail below. 

[01 01 ] Before discussing the SPU functions, however, a brief overview of 

iSCSI PDU's (Packet Data Units) and FC IUs (Information Units) will be useful. 
Nonetheless, a general knowledge of the iSCSI and FC protocols is assumed. For 
more information on iSCSIrefer to "draft-ietf-ips-iSCSI-07.txt," an Internet Draft and 

15 work in progress by the Internet Engineering Task Force (IETF), July 20, 2001, 
incorporated by reference herein. For more information about Fibre Channel (FC) refer 
to "Information Systems - dpANS Fibre Channel Protocol for SCSI," Rev. 012, 
December 4, 1995 (draft proposed American National Standard), incorporated by 
reference herein. 

20 [0102] A brief description of relevant PDUs and IUs follows below. 

[0103] iSCSI Command PDU An iSCSI Command PDU is showninFig. 8a. 

As shown it includes 48 bytes having the following fields. In the first byte (Byte 0), the 
X bit is used as a Retry/Restart indicator for PDUs from initiator to target. The I bit is 
25 used as an immediate delivery marker. The Opcode 0x01 indicates that the type of 
iSCSI PDU is a command. Byte 1 has a number of flags, F (final), R (read), and W 
(write). Byte 1 also has a task attribute field ATTR, which is usually 3 bits. CRN in Byte 
3 is a SCSI command reference number. TotalAHSLength represents the total length 
of any additional optional header segments (not shown) in 4-byte words. 
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DataSegmentLength indicates the length of the payload. LUN specifies a logical unit 
number. The Initiator Task Tag identifies a task tag assigned by the initiator (e.g., a 
server) to identify the task. Expected Data Transfer Length states the number ofbytes 
of data to be transferred to or from the initiator for the operation. CmdSN is a command 
5 sequence number. ExpStatSN is an expected status sequence number and ExpDataSN 
is an expected data sequence number. The Command Descriptor block (CDB) is 
generally 16 bytes and embodies the SCSI command itself. 

[0104] iSCSI R2T PDU . An iSCSI R2T PDU is shown in Fig. 8b. InbyteO, 

10 0x3 1 identifies the packet as an R2T packet. The Initiator Task Tag is the same as for 
the Command PDU. The Target Transfer Tag is assigned by the target (e.g. , a storage 
device) and enables identification of data packets. The StatSN field contains a status 
sequence number. ExpCmdSN identifies the next expected CmdSN from the initiator 
and MaxCmdSN identifies the maximum CmdSN acceptable from the initiator. R2TSN 
15 identifies the R2T PDU number. Desired Data Transfer Length specifies how many bytes 
the target wants the initiator to send (the target may request the data in several chunks). 
The target, therefore, also specifies a Buffer Offset that indicates the point at which the 
data transfer should begin. 

20 [0105] iSCSI Write and Read Data PDUs . An iSCSI Write Data PDU is 

shown in Fig; 8c. An iSCSI Read Data PDU is shown in Fig. 8d. In byte 0, 0x05 
identifies the packet as a write packet and 0x25 identifies the packet as a read packet. 
Most of the fields in these PDUs are the same as for those PDUs described above. In 
addition, the DataSN identifies a data sequence number and Residual Count identifies 

25 how many bytes were not transferred out of those expected to be transferred, for 
instance if the initiator's Expected Data Transfer Length was too small. 

[0106] iSCSIResponse PDU . An iSCSI Response PDU is shown in Fig. 8e. 

In Byte 0, 0x21 identifies the packet as aresponse packet. The Status field is used to 
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report the SCSI status of the command. The response field contains an iSCSI service 
response code that identifies that the command is completed or that there has been an 
error or failure. Basic Residual Count identifies how many bytes were not transferred out 
of those expected to be transferred, for instance if the initiator's Expected Data Transfer 
5 Length was too small. BidiJRead Residual Count indicates how many bytes were not 
transferred to the initiator out of those expected to be transferred. Other fields are the 
same as those discussed previously for other PDUs. 

[0107] FCP Frame Header . Each FCP Information Unit (IU) uses the Frame 

Header shown inFig. 8f and which will be followed by apayload, described below. 
The R_CTL field identifies the frame as part of an FC operation and identifies the 
information category. D_ID identifies the destination of the frame. S_JD identifies the 
source of the frame. TYPE is generally set to 0x08 for all frames of SCSI FCP 
sequences. F_CTL manages the beginning and normal or abnormal termination of 
sequences and exchanges. SEQJD identifies each sequence between a particular 
exchange originator and exchange responder with a unique value. DF_CTL indicates any 
optional headers that may be present. SEQ_CNT indicates the frame order within the 
sequence. The OXJD field is the originator (initiator) identification of the exchange. The 
RXJD field is the responder (target) identification of the exchange. The RLTVJDFF 
field indicates the relative displacement of the first byte of each frame's payload with 
reference to the base address of the information category. 

[0108] FCP CMNDPavload . The payload for aFCP command IU is shown 

in Fig. 8g. FCPJLUN is a logical unit number. FCP_CNTL is a control field that 
25 contains anumber of control flags and bits, FCP_CDB contains the actual SCSI CDB 
to be interpreted by the addressed logical unit. FCP_DL contains a count of the greatest 
number of data bytes expected to be transferred to or from the target. 
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[0109] FCP XFR RDY Pavload . The payload for an FCP XFRJRDY IU is 

showninFig. 8h. The DATA _RO field indicates the contents oftheRLTV_OFF field 
for the first data byte of the next FCPJD ATA IU. The BURST JLEN field indicates the 
amount ofbuffer space prepared for the next FCP_D ATA IU and requests the transfer 
of an IU of that exact length. 

[0110] FCP DATA IU . The payload for a data IU is the actual data transferred. 

[0111] FCP RSP IU . The payload for anFCP response IU is shown in Fig. 

8i. The FCP_ STATUS field is set to 0 upon the successful completion of a command 
task Otherwise it indicates various status conditions. TheFCP_RESID field contains 
a count of the number of residual data bytes which were not transferred in the 
FCP_D ATA IU for this SCSI command. FCP SNS_LEN specifies the number ofbytes 
in the FCPJSNSJNFO field. FCP_RSPJLEN specifies the number ofbytes in the 
FCP_RSP_INFO field. The FCPJRSPJQNFO field contains information describing any 
protocol failures detected. The FCP_SNS_INFO field contains any sense data present. 
[0112] The details of eachiSCSI PDU and FC IU have been onlygenerally 

described. Further details regarding iSCSI PDUs, FC IUs, and their respective fields 
can be found in the iSCSI and FC documents referenced above. 

Classification for Storage Switch 

[0113] As packets or frames (generically referred to herein as "packets") arrive 

at the storage switch they are separated at each port into data and control traffic . Data 
traffic is routed to the PPU for wire-speed virtualization and translation, while control 
traffic such as connection requests or storage management requests are routed to the 
CPU. This separation is referred to herein as "packet classification" or just 
"classification" and is generally initiated in the PACE of the SPU. Accordingly, unlike 
the existing art, which forwards all packets to the CPU for processing, a system in 
accordance with the invention recognizes the packet contents, so that data traffic can be 
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processed separately and faster, aiding in enabling wire-speed processing. GigE packets 
and FC frames are handled slightly differently, as described below. 
[0114] For packets arriving at a GigE port in the ingress direction (packets 

arriving at the switch), the following steps will be described with reference to Fig. 9a. 
5 A GigE port will receive a packet, which in one embodiment is either an IP packet or 
an iSCSI packet, step 902. Once the packet is received, the PACE determines if a 
virtual target access is recognized by whether it receives from the port a valid TCP 
Control Block Index with the packet (e.g., an index that is not - 1), step 904. If there 
is a valid TCP Control Block Index, the PACE next checks the flags of the packet's 

1 0 TCP header, step 906. If the SYN, FIN, and RST flags of the TCP header are set, the 
packet is forwarded to the CPU, step 916, as the CPU would be responsible to 
establish and terminate a TCP session. Once an iSCSI TCP session is established, for 
managing the TCP session^ the GigE port will receive a valid TCP control block from 
the CPU. But if the flags are not set, then in one embodiment the PACE will remove the 

15 TCP,IP, and MAC headers, step 908, leaving the iSCSI header, and then add a local 
header, step 910. Other embodiments, however, may leave the TCP, BP and MAC 
headers, and simply add a local header. Once the local header is added, the packet is 
sent to the PPU, step 912. 

[0115] Referring additionally to Fig. 10a,ifstep 9 10 isperformed, the received 

20 TCP packet 1 002 would be converted to a local packet 1 004, having the IP, TCP, and 
MAC headers 1006, 1008, 1009 removed (in one embodiment) and a local header 
1010 added. In some cases, however, the payload for an iSCSI packet may be split 
over two TCP/IP packets. Thus, referring to Fig. 10b, sometimes a received TCP 
packet 1012 includes a second portion 1014 of a payload, where the first part of the 
25 payload was sent in aprevious packet. The packet containing the second portion of the 
payload may additionally contain a new independent payload 1016. The received 
packet 1012 would be divided into two local packets, 1018 and 1 020. Local packet 
1018 includes a local header 1022 and the second portion ofthepayload 1024 froma 
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previous packet, but not an iSCSI header. Local packet 1 020 includes the local header 
1026, the iSCSI header 1028, and the new payload 1030. 

[01 16] An example local header 1 1 00 used in one embodiment is shown in Fig. 

1 1 . The local header 1100 includes the following fields in one embodiment. A VTD ID 
5 field is used to identify a VTD for a particular connection. A FlowED specifies the 
destination port for a packet. A TCP Control Block Index specifies a TCP control 
block for a particular connection (if a TCP connection). The Type field specifies the 
packet classification, e.g., data or control. The Size field indicates the packet size. The 
Task Index is used to track and direct the packet within the switch as well as to locate 
1 0 stored information related to the packet for the particular task. The local header further 
includes some hardware identifiers such as source identifiers (e.g., identifying a source 
port, PACE, linecard, and/or CPU) and destination identifiers (e.g., identifying a 
distinction Port, PACE linecard, and/or CPU). 

[0117] The local header is used by various devices (e.g., PACE, PPU) 

1 5 throughout the switch. Accordingly, in some instances not all fields of the local header 
will be fully populated and in some instances the field contents may be changed or 
updated. 

[0118] Referring again to Fig. 9a, in the event that there is no valid TCP Control 

Block Index, step 904, then it is determined if the packet is an IP packet, step 9 1 4. If 

20 the packet is not an IP packet, it is forwarded to the CPU, step 916. If the packet is 
an IP packet, then the PACE checks the destination IP address, step 918. If the IP 
address matches that of the port of the storage switch, the packet is sent to the CPU, 
step916, for processing. If the IP address does not match that of the port of the storage 
switch, then it is routing traffic and is forwarded to the PPU, step 912. 

25 [0119] Referring to Fig. 9b, when a packet destined for a GigE port is received 

in the egress direction by the PACE from an PPU or CPU, step 950, the PACE 
removes the local header, step 952. If the packet is for a TCP session, step 954, the 
PACE sets a control flag in its interface with the port to so inform the GigE port, step 
956. If the packet is for a TCP session, the PACE passes the packet and the TCP 
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Control Block Index to the port using interface control signals, step 958. If there is no 
TCP session, the packet is simply passed to the port, step 960. 
[0120] Fig. 12a illustrates the steps that occur at the PACE in classifying 

packets that arrive from an FC port. Unlike for a GigE port, the PACE for an FC port 
5 does not have to deal with a TCP Control Block Index. Instead, upon receiving a 
packet at an FC port, step 1202, the SJD field of the FCP frame header can be 
consulted to determine if the frame belongs to an open FC connection, however, this 
step is performed after the packet is passed to the PPU. Thus, the PACE only need 
determine if the frame is an FCP frame, step 1204, which can be determined by 
10 consulting the R_CTL and TYPE fields of the frame header. A local header 1 1 00 (Fig. 
1 1 ) is added, step 1 206, although the FCP frame header is not removed at this point as 
the data in the header will be useful to the PPU later. The local packet is then passed 
to the PPU, step 1 208. If the framfe is not an FCP frame, it is passed to the CPU, step 
1210. 

15 [0121] Referring to Fig. 12b, when apacket destined for anFC port is received 

in the egress direction by the PACE from an PPU or CPU, step 1 250, the PACE simply 
removes the local header, step 1252, before passing the frame to the FC port, step 
1 254. The local header will indicate to the PACE which port (of the two ports the 
PACE is connected to) the packet is destined for. 

20 [0122] For packets received at either a GigE or FC port and that are passed 

to the PPU, the PPU further separates control traffic in one embodiment. Referring to 
Fig. 13a, when the PPU receives a packet from the PACE, step 1302, the PPU 
determines if it is an IP or TCP packet, step 1304. If the packet is an IP packet, the 
PPU searches its CAM to obtain the FlowID of the packet from its route table, step 

25 1 306. If the search fails, the packet has an unknown destination IP address, and it is 
passed to the CPU, step 1 308, which in turn sends an ICMP packet back to the source 
IP address step 1310. If the search returns a FlowID, then the packet is forwarded to 
the Traffic Manager, step 1311. 
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[0123] When the packet received is a TCP packet, step 1304, the PPU 

searches its CAM using the TCP Control Block Index, which identifies the TCP session, 
together with the LUN from the iSCSI header, which identifies the virtual target, to get 
a virtual target descriptor ID (VTD ID), step 1312. The VTD ID's are essentially 
5 addresses or pointers to the VTDs stored in the PPU SRAM. The PPU uses the VTD 
ID to obtain the address of the VTD, step 1312, so a search of VTD ID's allows the 
ability to quickly locate a VTD. If the VTD cannot be obtained, then the iSCSI session 
has not yet been established, and the packet is sent to the CPU, step 1314. But if the 
VTD ID is obtained in step 1 3 1 2, the PPU determines if the packet contains an iSCSI 

1 0 PDU, step 1315. If the packet does not contain an iSCSI PDU, it is forwarded to the 
CPU.step 1314. But ifit does include an iSCSI PDU, the PPU determines if the PDU 
is a data moving PDU (e.g., read or write command, R2T, write data, read data, 
response), step 1316. If the PDU is not a data moving PDU, then the packet is passed 
totheCPU,step 1314. But ifthe PDU is a data moving PDU, then the PPU performs 

1 5 further processing on the packet, step 1 3 1 8, e.g., virtualization and translation, as will 
be described later. 

[0 1 24] When the PPU receives an FCP frame with an FCP command IU in the 

ingress direction, the PPUperforms similar steps to those described in Fig. 13a, steps 
1 302, 1 3 1 2- 1 3 1 8, except that the CAM search in step 1312 uses the S_E> address and 

20 the LUN from the FCP frame to find the VTD ID. 

[01 25] In the egress direction, shown in Fig. 1 3b, after receiving apacket from 

the traffic manager, step 1350, the PPU checks the Type field of the local header, step 
1352. Ifthe field indicates that the packet is an IP packet or apacket destined for the 
CPU, then the PPU sends the packet to the PACE, step 1354. Otherwise, the PPU 

25 performs further processing on the packet, step 1356, e.g., virtualization and translation, 
as will be described later. 

[0126] As described above, the CPU will be passed packets from the SPU in 

several situations. These situations include: 
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A non-TCP packet having the storage switch as its destination. Such 
a packet could be an ICMP, IP, RIP, BGP, or ARP packet, as are 
understood in the art. The CPU performs the inter-switch 
communication and IP routing function. The packet may also be SLP 
or iSNS requests that will be forwarded to the SCC. 
An IP packet without a CAM match to a proper routing destination. 
While this situation will not frequently occur, if it does, the CPU returns 
an ICMP packet to the source IP address. 

A non-iSCSI TCP packet. Such a packet would generally be for the 
CPU to establish or terminate a TCP session for iSCSI and will 
typically be packets with SYN, FIN, or RST flags set. 
A non-FCP FC frame. Such frames are FLOGI, PLOGI, and other 
FCP requests for name services. Similar to iSCSI TCP session, these 
frames allow the CPU to recognize and to communicate with the FC 
devices. In one embodiment, the CPU needs to communicate with the 
SCC to complete the services. 

An iSCSI PDU that is not a SCSI command, response, or data. Such 
a packet maybe aping, login, logout, or task management Additional 
iSCSI communication is generally required before a full session is 
established. The CPU will need information from the SCC database to 
complete the login. 

An iSCSI command PDU with a SCSI command that is not 
Read/Write/Verify. These commands are iSCSI control commands to 
be processed by the CPU where the virtual target behavior is 
implemented. 

AnFCP frame with a SCSI command that is not Read/Write/Verify. 
These commands are FCP control commands to beprocessed by the 
CPU where the virtual target behavior is implemented. 
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Virtualization 

[0127] After tlie packet is classified, as described above, the PPU performs 

wire-speed virtualization and does so without data buffering in one embodiment. For 
each packet received, the PPU determines the type of packet (e.g., command, 
5 R2T/XFR_RDY, Write Data, Read Data, Response, Task Management/Abort) and 
then performs either an ingress (where the packet enters the switch) or an egress (where 
the packet leaves the switch) algorithm to translate the virtual target to aphysical target 
or vice versa. Thus, the virtualization function is distributed amongst ingress and egress 
ports. To further enable wire-speed processing, virtual descriptors are used in 

1 0 conjunction with a CAM, to map the request location to the access location. In addition, 
for each packet there may be special considerations . For instance, the virtual target to 
which the packet is destined maybe spaced over several noncontiguous extents, may 
be mirrored, or both. (Mirroring is discussed in the "Storage Services" section of this 
document.) The ingress and egress process for each packet type is described below. 

1 5 However, generally, the ingress process for each packet validates the virtual target, 
determines the egress port to send the packet to, and leaves trace tags so responsive 
packets can be tracked. The egressprocess generally continues to maintain trace tags 
and makes adjustments to the block addresses to translate from the virtual world to the 
physical one. 

20 Command Packet - Ingress 

[0128] To initiate a transfer task to or from the virtual target, a SCSI command 

is always sent by an iSCSI or FC initiator in an iSCSI PDU or FCP IU, respectively. 
Referring to Fig. 14 and 14a, when such a packet is received at the PPU (after 
classification), step 1 402, the PPU CAM is next checked to determine if a valid VTD 

25 ID exists, using the TCP Control Block Index and the logical unit number (LUN), in the 
case of an iSCSI initiator, or the S JD and the LUN, in the case of an FC initiator, step 
1404. The LUNs in each case are found in the respective iSCSI PDU or FCP IU. If 
no valid VTD ID is found, then a response packet is sent back to the initiator, step 
1406. If a valid VTD is found, then a check is made for invalid parameters, step 1 408 . 
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Such checks may include checking to deteimine if the number of outstanding commands 
for the virtual target has exceeded a maximum allowable number or if the blocks 
requested to be accessed are in an allowable range. If invalid parameters exists, a 
response packet is sent back to the iSCSI or FC initiator, step 1406. 
5 [0129] If all parameters checked are valid, then aTask Index is allocated along 

with an Ingress Task Control Block (ITCB), step 1410 and shown in Fig. 14a. The 
Task Index points to or identifies the ITCB. The ITCB stores the FlowID (obtained 
from the VTD), the VTD ID, CmdSN (from the iSCSI packet itself), as well as the 
hiitiator_task_tagsentintheiSCSIPDUortheOX_IDintheFCP frameheader. The 

10 ITCB is stored in the PPU SRAM. Of course there may be many commands in 
progress at any given time, so the PPU may store a number of ITCBs at any particular 
time. Each ITCB will be referenced by its respective Task Index. 
[0130] The VTD tracks the number of outstanding commands to aparticular 

virtual target, so when a new ITCB is established, it must increment the number of 

1 5 outstanding commands, step 1 41 2. hi some embodiments, VTDs establish a maximum 
number of commands that may be outstanding to any one particular virtual target. The 
FlowID, the VTD ID, and the Task Index are all copied into the local header, step 
1414. The FlowID tells the traffic manager the destination linecards and ports. Later, 
the Task Index will be returned by the egress port to identify a particular task of a 

20 packet. Finally, the packet is sent to the traffic manager and then the routing fabric, so 
that it ultimately reaches an egress PPU, step 1416. 

[0131] When a virtual target is composed of multiple extents, then there will be 

multiple FlowIDs identified in the VTD, one for each extent. The PPU checks the block 
address for the packet and then selects the correct FlowID. For example, if a virtual 
25 target has two 1 Gb extents, and the block address for the command is in the second 
extent, then the PPU selects the FlowID for the second extent. In other words, the 
FlowID determines the destination/egress port. If a read command crosses an extent 
boundary, meaning that the command specifies a startingblock address in a first extent 
and an ending block address in a second extent, then after reading the appropriate data 
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from the first extent, the PPU repeats the command to the second extent to read the 
remaining blocks. For a write command that crosses an extent boundary, the PPU 
duplicates the command to both extents and manages the order of the write data. When 
a read command crosses an extent boundary, there will be two read commands to two 
5 extents. The second read command is sent only after completing the first to ensure the 
data are returned sequentially to the initiator. 

[0132] Note that in reference to Fig. 1 4a, not all fields in the local header are 

necessarily illustrated. 

10 Command Packet - Egress 

[0133] Referring to Figs. 15 and 15a, after the command PDU or IU has 

passed through the switch fabric, it will arrive at an PPU, destined for an egress port, 
step 1 502. The PPU then attempts to identify the physical device(s) that the packet is 
destined for, step 1 504. To do so, the VTD ID from the local header is used to search 

1 5 the PPU CAM for a PTD ID (Physical Target Descriptor Identifier) : The VTD ID is 
affiliated with and indexes a particular PTD ID associated with the particular egress 
PPU. PTDs are stored in the PPU SRAM, like VTDs, and also contain information 
similar to that found in a VTD. If the search is unsuccessful, itis assumed that this is a 
command packet sent directly by the CPU and no additional processing is required by 

20 the PPU, causing the PPU to pass the packet to the proper egress port based on the 
FlowID in the local header. If the search is successful, the PTD ID will identify the 
physical target (including extent) to which the virtual target is mapped and which is in 
communication with the particular egress linecard currently processing the packet. 
[0134] The PPU next allocates a Task Index together with an egress task 

25 control block (ETCB), step 1506, and shown in Fig. 15 a. In an embodiment, the Task 
Index used for egress is the same as that used for ingress. The Task Index also identifies 
the ETCB . In addition, the ETCB also stores any other control information necessary 
for the command, including CmdSN of an iSCSIPDU or an exchange sequence for an 
FCP IU. 
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[0135] Next, using the contents of the PTD, the PPU converts the SCSI block 

address from a virtual target to the block address of a physical device, step 1508. 
Adding the block address of the virtual target to the beginning block o ffset of the extent 
can provide this conversion. For instance, if the virtual target block sought to be 
5 accessedis 1990 and the starting offset ofthe corresponding first extent is 3000, then 
the block address of the extent to be accessed is 4990. Next the PPU generates proper 
iSCSI CmdSN or FCP sequence ID, step 1 5 1 0 and places them in the iSCSI PDU or 
FCP frame header. The PPU also constructs the FCP frame header if necessary (in 
some embodiments, after the ingress PPU reads the necessary information from the FCP 

1 0 header, it will remove it, although other embodiments will leave it intact and merely 
update or change the necessary fields at this step) or for a packet being sent to an 
iSCSI target, the TCP Control Block Index is copied into the local header from the 
PTD, step 1 5 12 . In addition, the PPU provides any flags or other variables needed for 
the iSCSI or FCP headers. The completed iSCSI PDU or FCP frame are then sent to 

1 5 the PACE, step 1514, which in turn strips the local header, step 1516, and passes the 
packet to appropriate port, step 1518. 

[0136] For a virtual target of multiple extents, each extent has a different starting 

offset So when a command must be split between two extents, the PPU must determine 
the proper address . For instance, assume a virtual target includes two extents defined 
20 in Table 1: 



Table 1 



Extent 


1 


2 


Starting offset 


3000 


5000 


Size in blocks 


2000 


2500 



[0137] If it is desired to access the virtual target starting at address 1 990 for 30 

blocks, then the PPU for the first extent sends the command to address 4990 for 1 0 
blocks (5 1 20 bytes of data - in one embodiment a block is 5 1 2 bytes) . The PPU for 
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the second extent sends the command to address 5000 for 20 blocks ( 1 0,240 bytes of 
data) . In other words, the PPU for the first extent must add the address to be accessed 
to the starting offset of the first extent (3000 + 1 990) and then subtract that address from 
its total size (2000- 1990) to determine how many blocks it can access. ThePPUfor 
5 the second extent will start at its starting offset (5 000) and add the remaining blocks (20) 
from there (5000-50 1 9). As a further example, if it was desired to access virtual block 
2020, the PPU for the second extent would subtract the size of the first extent (2000), 
before adding the offset for the second extent (5000), to achieve the resulting address 
5020. 

10 

R2T or XFR RDY - Ingress 
[0138] Referring to Fig. 1 6 and 1 6a, after a command has been sent to a target 

storage device as described above, and the command is a write command, anR2T PDU 
or an XFRJRD Y IU will be received from a storage device when it is ready to accept 

15 write data, step 1602. The PPU identifies the corresponding ETCB, step 1604, by 
using the initiator_task_tag or OX ID inside the packet. In some embodiments, the 
initiator_task_tag or OX DD of the packet is the same as the Task Index, which 
identifies the ETCB. If the PPU cannot identify a valid ETCB because of an invalid 
initiator_task_tag or OXJD, the packet is discarded. Otherwise, once the ETCB is 

20 identified, the PPU retrieves the Ingress Task Index (if different from the Egress Task 
Index) and the VTD ID from the ETCB, step 1606. The PPU also retrieves the FlowID 
from the PTD, which is also identified in the ETCB by the PTD ID. The FlowID 
indicates to the traffic manager the linecard of the original initiator (ingress) port. The 
FlowID, the VTD ID, and the Task Index are copied into the local header of the packet, 

25 step 1608. Finallythepacket is sent to the traffic manager and the switch fabric, step 
1610. 
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R2T or XFR RDY - Eeress 
[0139] After the R2T or XER_RD Y packet emerges from the switch fabric, it 

is received by a PPU, step 1702, on its way to be passed back to the initiator (the 
device that initiated the original command for the particular task). The Task Index 
5 identifies the ITCB to the PPU, step 1704, from which ITCB the original 
initiator_task_tag and the VTD ID can be obtained. The R2T/XFR RDY Desired D ata 
Transfer Length or BURSTJLEN field is stored in the ITCB, step 1 706. The local 
header is updated with the FCP D_ID or the TCP Control Block Index for the TCP 
connection, step 1 708 . Note that the stored S_ID from the original packet, which is 

10 stored in the ITCB, becomes the DID. If necessary an FCP frame header is 
constructed or its fields are updated, step 1710. The destination port number is 
specified in the local header in place oftheFlowID, step 1712, and placed along with 
the initiator_task_tag in the SCSI PDU or, for an FC connection, the RX_ID and 
OXJD are placed in the FCP frame. The PPU also places any other flags or variables 

1 5 that need to be placed in the PDU or FCP headers. The packet is forwarded to the 
PACE, step 1714, which identifies the outgoing port from the local header. The local 
header is then stripped, step 1716 and forwarded to the proper port for transmission, 
step 1718. 

[0140] In the event that the command is split over two or more extents, e. g. , the 

20 command starts in one extent and ends in another, then the PPU must hold the R2T or 
XFRRDY of the second extent until the data transfer is complete to the first extent, thus 
ensuring a sequential data transfer from the initiator. In addition, the data offset of the 
R2T or XFR_RDY of the second extent will need to be modified by adding the amount 
of data transferred to the first extent. Referring to the example of Table 1, if the 
25 command is to access block 1 990 for 30 blocks, then the data offset for the R2T or 
XFR_KDY of the second extent must add 1 0 blocks so that block 1 1 is the first block 
to be transferred to the second extent. 
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Write Data Packet - Ingress 
[0141] After an initiator receives an R2T or XFR_JRDY packet it returns a 

write-data packet. Referring to Figs. 18 and 18awhenawrite-dataiSCSIPDUorFC 
IU is received from an initiator, step 1 802, the ITCB to which the packet belongs must 
5 be identified, step 1804. Usually, the ITCB can be identified using the RXJD or the 
target_task_tag, which is the same as the Task Index in some embodiments. The SPU 
further identifies that received packets are inorder. In some circumstances, however, 
the initiator will transfer unsolicited data: data that is sent prior to receiving an R2T or 
XFR_RDY. In such a case, the PPU must find the ITCB by a search through the 

1 0 outstanding tasks of a particular virtual target. But if the ITCB is not found, then the 
packet is discarded. If the ITCB is found, the total amount of data to be transferred is 
updated in the ITCB, step 1 806. The FlowID and Task Index are added to the local 
header of the packet, step 1 808 . The packet is then forwarded to the traffic manager 
and ultimately to the switch fabric, step 1810. 

1 5 [0142] In the event that a command is split between two extents because the 

command starts in one and ends in the second, the PPU must determine the extent to 
which the particular data belongs and forward the data packet to the correct egress 
linecard. The PPU sets the proper FlowED to the extent. After completing the data 
transfer on the first extent, the PPU checks if the R2T or XFR_RDY of the second 

20 extent was received. Until the data transfer is completed on the first extent, the data will 
not be sent to the second extent to ensure sequential transfer. 

Write Data Packet - Egress 
[0143] Referring to Figs. 1 9 and 1 9a, when a write-data packet is received 

25 from the switch fabric (via the traffic manager), step 1 902, the ETCB for the packet 
needs to be identified, step 1 904. Typically, the ETCB can be identified using the Task 
Index in the local header. Once the ETCB is found, using the information inside the 
ETCB, the PPU generates proper iSCSI DataSN or FCP sequence ID, step 1906, 
along with any other flags and variables, e.g, data offset, for the PDU or FCP frame 
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header. The local header is updated with the TCP Control Block Index or the FCP 
D_ID from the PTD, step 1908. The port number is also added to the local header. 
The finished iSCSI PDU or FCP frame is sent to the PACE, step 1910, which removes 
the local header, step 1912, and forwards the packet to the appropriate port, 1914. 
5 [0144] In the event that the command is split between two extents, the data 

offset of the packet to the second extent must be adjusted. Using the example of 
Table 1, if the command is to access virtual addresses starting at 1 990 for 30 blocks, 
then the data offset of the write data p acket to the second extent must be subtracted by 
ten blocksbecause the block 1 1 from an initiator is actually the first ofthe second extent. 

10 

Read Data Packet - Ingress 
[0145] ReferringtoFig.20and20a, after receiving a read command, the target 

device will respond with aread-data packet, which will be received at the PPU (after 
undergoing classification in the PACE), step 2002. The ETCB for the packet is then 

1 5 identified, using the OXJD or initiator_task_tag, step 2004. The PPU further verifies 
if the packet was received in order using sequence numbers or verifying that data ofisets 
are in ascending order, step 2006. If the packet was not in order, the read command 
is terminated in error. If the packet is in proper order, however, the VTD ID, Task 
Index, and FlowID are retrieved from the ETCB and VTD and copied into the local 

20 header, step 2008. The packet is sent to the traffic manager and ultimately the switch 
fabric, step 2010. 

[0146] In the event that a read-data packet crosses an extent boundary, the 

data oflset ofthe packet from the second extent must be modified. This oflset is usually 
performed on the egress side, described below, as the FlowID will identify the packet 
25 from the second extent. In addition, in order to ensure sequentially returned data, the 
read command to the second extent will not be sent until completion ofthe read from the 
first extent. 
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Read Data Packet - Egress 
[0147] Referring to Fig. 2 1 and 2 1 a, when a read-data packet is received by 

an PPU from the switch fabric, step 2 1 02, the ITCB for the packet is identified, step 
2104, usually using the Task Index in the local header. From the ITCB, the PPU 
5 retrieves the initiator Jask Jag or OXID, step 2 1 06 . Using the saved data in the ITCB, 
the PPU generates proper iSCSIDataSN or FCP sequence IDs as well as other flags 
or variables ofthePDU or FCP frame header, step2108. The local header is updated 
with the TCP Control Block Index or FCP S_ID from the VTD, step 21 10. Note, 
however, that for apacket going back to the initiator, the S_ID from the original packet 

1 0 will be used as the D_ID. The outgoing port number is also added to the local header. 
The packet is then sent to the PACE, step 2112, which removes the local header, step 
21 14, and forwards the packet to the appropriate port, step 2116. 
[01 48] In the event that a command is split between two extents (a fact tracked 

in the ITCB), the data offset of the packet from the second extent must be modified in 

15 a way similar to that described previously. 

Response Packet - Ingress 
[0149] Referring to Figs. 22 and 22a, a response packet will be received from 

a target device, step 2202. The ETCB for the packet is then identified, step 2204, 

20 using the initiator_task_tag or OXJD of the packet. In some embodiments the 
initiator_task_tag or OX_ID will be the same as the Task Index. If the ETCB is not 
found, the packet is discarded. However, if the ETCB is found, then the Task Index is 
copied into the local header of the packet along with the VTD ID and the FlowID, step 
2206. The packet is sent to the traffic manager and ultimately to the switch fabric, step 

25 2208. Finally, because the response packet signals the completion of a task, the ETCB 
for the task is released, step 2210. 
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Response Packet - Egress 
[0150] Referring to Fig. 23 and23a, after a response packet has been through 

the switch fabric, it will be received by an egress PPU, step 23 02. The ITCB for the 
packet is identified, step 2304, using the Task Index from the local header. If the ITCB 
5 is not found, the packet is discarded. If the ITCB is found, the outstanding command 
count for the virtual target is decremented in the VTD, step 2306. The PPU generates 
the LUN, iSCSI ExpStatSN or FCP sequence ID from information in the ITCB and, 
if necessary, constructs or updates the proper FCP header, step 2308 . The PPU also 
constructs other flags and variables for the PDU or FC frame header. The PPU updates 

10 the local header with the TCP Control Block Index or FCP SJOD (which becomes the 
D JD) retrieved from the VTD, step 23 1 0. The packet is forwarded to the PACE, step 
2312, which removes the local header, step 2314, and forwards the packet to the 
appropriate port, step 2316. The PPU frees the ITCB, step 2318. 
[0151] When a write command has been sent to more than one extent, a 

15 response packet is not sent to the initiator until completion of the write to all extents. 
[0152] Note that for all Figs. 9-23, although the steps are described to occur 

in a particular order, in other embodiments, the order of some of the steps may be 
changed and some may be performed simultaneously. 

20 Task Management PDU, Abort. Abort Sequence/Exchange- Ingress 

[0 1 53] An ABORT iSCSI function or Abort Sequence/Exchange terminates the 

command abnormally. The PPU finds the ITCB usingthe OXJD or initiator_task_tag 
of the packet. If no ITCB is found, the command is assumed to have been completed 
or never received and a response will be generated indicating TASK-NOT-FOUND. 

25 If the ABORT is received from a target device, the PPU finds the ETCB and frees it. 
An ACK is returned to the target device, and the ABORT is passed to a linecard 
connecting to the initiator to terminate the command. If the ABORT is received from an 
initiator, the ABORT is passed to the linecard connecting to the target to terminate the 
command. The PPU frees the respective task control blocks, ITCB and ETCB. 
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Task Management PDU. Abort. Abort Sequence/Exchange-Egress 
[0154] An ABORT from the ingress linecard indicates to the egress linecatd to 

send an ABORT to the target device. When the completion response is returned from 
5 the target, the ETCB is freed. If the ETCB is not found, the ABORT is ignored. 

Translation 

[0155] As discussed previously, a storage switch in accordance with the 

invention can be coupled to devices that transmit data in accordance with any of a 

10 plurality of protocols. And as also discussed previously, in one embodiment, the 
protocols utilized by servers and storage devices are iSCSI and Fibre Channel. 
However, if a switch is coupled to a server that operates in accordance with one 
protocol and a storage device that operates in accordance with a second protocol, or 
vice versa, then the switch must perform protocol translation. Conventionally, to do such 

1 5 translation, the packet must be stored in memory and then operated on by a CPU before 
it can be forwarded out, if such a conventional system can perform protocol translation 
at all. In contrast, a storage switch in accordance with the invention can perform 
protocol translation without any buffering of the packets in the switch. 
[0156] Both iSCSIPDUs and Fibre Channel IUs aredesignedtocanySCSI 

20 CDBs (command descriptor blocks) in their respective packet or frame. As such, these 
protocols have similar semantics, as recognized by the inventors ofthe present invention 
Table 2 below illustrates a comparison between the protocols. 
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Table 2 



SCSI Phase 


iSCSI Protocol 


FC Protocol 


Arbitrate and Select 


o enuing jDinernex pacKe i 


Qonnintl n nria /"»Vi otitic! 

oenQing nore cnannei j 
frame 


Command 


Command PDU 


Command Frame 


Disconnect 


Receiving a packet 


Receiving a frame 


Reconnect for data 
transfer 


R2TPDU 


XFR_RDY frame 


Data 


Data PDU in TCP 
segments 


Data sequences in frames 


: Status 


Response PDU 


Response frame 


Abort and reset 


iSCSI task management 


Fibre channel ELS 


Queue full status 


MaxCmdSN window 


Task set Full 


No session login 


iSCSI Login and logout 


PLOGI and LOGO 



. [01 57] From the above table, it can be seen that there is a correlation between 

15 iSCSI Command PDU and FC Command Frame, an R2T PDU and XFRJRDY 
Frame, a Data PDU and Data Frame, and a Response PDU and Response Frame. 
Such correlations lend themselves to straightforward translation, which is performed in 
the PPU by mapping the fields from one packet to another and without buffering as will 
be described below. Abort-and-reset, session login-and-logout, and queue-full happen 
20 infrequently relative to the other packets and are passed to the CPU of the linecard for 
processing (except for the abort of a SCSI datamovement (e.g., read/write) command 
which is performed by the PPU). Note that for SCSI Arbitrate-and-select and 
Disconnect, both iSCSI and FC simply send or receive a packet/frame. 
[0158] Upon arrival of a packet to the PPU, as with virtualization, the PPU 

25 identifies the VTD associated with the packet by searching the CAM to determine if the 
incoming command belongs to a particular session (either iSCSI orFC) and aparticular 
virtual target. The CAM search is conducted, as previously described, using the TCP 
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Control Block Index and LUN (in the case of an iSCSI packet) or the S_ID and the 
LUN (in the case of an FC frame). However, in one embodiment of the invention, 
translation is performed at the egress PPU (the PPU that receives the packet after it has 
traveled through the switch fabric). The egress PPU also searches the CAM, but uses 
5 the VTD ID that is in the local header of the packet to find the PTD. 

[0159] Note that although the CAM search is described for both the 

virtualization and translation functions, it is to be understood that it, as well as other steps 
described with respect to the various functions, need only be performed once by the 
PPU and that the steps performed with respect to all described functions (e.g., 

10 classification, virtualization, and translation) can be integrated in many respects. 
[01 60] As also previously discussed with respect to the virtualization function, 

while the VTD keeps track of variables for the virtual target and physical target, the PPU 
also keeps track of variables that are typically not shared between the protocols in their 
ITCBs and ETCBs (one of each per SCSI command). Such variables includes task 

15 tags, CmdSN, DataSN, and StatSN for iSCSI, and OXJD, RXJD, exchange 
sequence numbers, and sequence initiation flags for Fibre Channel. Once the PPU has 
the VTD (or PTD), as well as the respective ETCB or ITCB, then it has all of the 
information necessary to perform the translation. Translation from iSCSI to FC or vice 
versa generally entails taking the information from the field of the incoming packet (e.g, . 

20 iSCSI) and mapping the information to a corresponding field in the outgoingpacket (e.g., 
FCP). 

[0161] iSCSI Initiator to FC Target . Translation from an iSCSI initiator 

(server) to an FC target (storage device) will be described first. Translation of an iSCSI 
Command PDU to an FCP CMND IU occurs in accordance with Table 3 below. 
25 Reference should also be made to Figs. 8a-8i. 
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Table 3 



from iSCSI Command PDU 


to FCP_CMND IU 


LUN field of iSCSI PDU 


FCP_LUN 


ATTR (3 bits) 


FCP_CNTL 


CDB field 


FCP_CDB 


Expected data transfer length 


FCP_DL 




OXJD, SEQJD, SEQ_CNT 



[0162] According to the table above, the contents of LUN field of the iSCSI 

1 0 PDU are mapped to the FCPJLUN field of the FCP_CMND IU. The LUN for the 
Physical Target is obtained from the PTD . Only the 3 bits of the iSCSI Task Attribute 
field ATTR are mapped to the FCP_CNTL field. The contents of CDB field of the 
iSCSI PDU are mapped to the FCP_CDB field. The contents ofthe data transfer size 
field are mapped to the FCP_DL field. Since OX__ID is unique to the FCP frame 
15 header, itis filledinby the PPU, typically with the Task Index from the ETCB for easy 
identification of responsive packets from the target. Other fields in the FCP Frame 
Header can be easily generated with information from the PTD or VTD. 
[0163] When the FC storage device responds, it will respond with an FC 

XFRJRDY frame, which must be translated back to the iSCSI R2T PDU: 

20 



Table 4 



from FCP XFRJRDY 


to R2T iSCSI PDU 


DATA_RO 


BufferJDffset 


BURSTLEN 


Data Transfer Length 




Initiator Task Tag and other fields 



[01 64] As shown in Table 4, the Buffer Offset and Data Transfer Length fields 

can be mapped directly from the FCP XFR_RD Y frame. However, other fields such 
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as StatSN, ExpCmdSN, MaxCmdSN, and R2TSN must be taken from the ITCB . In 
addition variables like task tags unique to the iSCSI R2T PDU are also placed in the 
packet by the PPU, usually using fields from the PTD or VTD. 
[01 65] After receiving anR2T, the iSCSI initiator will send a Write Data PDU, 

5 which must be translated to an FCP Data IU: 



Table 5 



from iSCSI Write Data PDU 


FCP DATA IU 


Buffer_OfFset 


RLTV_OFF 


payload 


payload 




OXJD, SEQ_CNT 



[01 66] As shown in Table 5, the RLTV_OFF field forthe FCP data IU will be 

mapped from the Buffer_Offset field of the iSCSI PDU. The payload for each 
1 5 packet/frame is identical. In addition, variables unique to the FCP frame are added, 
such as OXJD and SEQ_CNT, taken from the ETCB. 

[0167] When the iSCSI command sent initially from the iSCSIinitiatDris aread 

data command, the FC target will respond with an FCP_JD AT A IU, which needs to be 
translated to an iSCSI Read Data PDU: 

20 



Table 6 



from FCP DATA IU 


to iSCSI Read Data PDU 


RLTVOFF 


Buffer_Offset 


Data Payload 


Data Payload 




Initiator Task Tag, Residual Count 
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[01 68] As shown in Table 6, the Bufferjoflfeet field for the iSCSI PDU will be 

mapped fiom the RLTV_OFF field of the FCP IU. All other fields are taken from the 
ITCB as well as variables unique to the PDU such as task tags. 
[0169] Oncethetaskis complete (e.g., reading or writing of data is finished), 

5 then the FCP target sends a response packet (FCP_RSP IU) that must be translated 
into an iSCSI format: 



Table 7 



from FCP RESPONSE IU 


to iSCSI Response PDU 


FCP_STATUS 


Flags and status fields 


FCP_SNS_LEN 


DataS egmentLength 


FCPJRESID 


BasicResidualCount 


FCP_SNS_INFO 


Sense Data 


FCP_RSP_INFO 


error codes 




Initiator Task Tag, MaxCmdSN, 
ExpCmdSN 



[0170] As shown in Table 7, the Status field of the FC IU is mapped to the flag 

and status fields of the iSCSI PDU. FCP_SNS_LEN, FCPJRESID, and 
FCPJSNSJNFO are mapped to DataS egmentLength, BasicResidualCount and Sense 
20 Data, respectively. The FCP_RSP_INFO field is for transport errors that must be 
mapped to the iSCSI error codes. Finally, variables like the Task Tag or ExpCmdSn, 
StatSN, MaxCmdSN, ExpDataSN, and ExpR2TSN that are unique to the iSCSI Status 
PDU are added from the ITCB or VTD. 

[0171] When there are flag? in the FCP_CNTL for taskmanagement like Abort 

25 Task Set, a separate iSCSI task management command will be sent to the iSCSI 
initiator devices. Similarly, if an iSCSI task management PDU is received, an NOP FC 
command with proper flags in the FCP_CNTL will be sent to the target device. 
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[0172] Note that not all fields that are unique to either the iSCSI PDUorFCP 

frame are listed in the above-described tables. Reference canbemadeto Figs. 8a-8i 
for a complete listing of fields. It is to be understood that for any unlisted fields the 
information can be obtained from the relevant task control block, the VTD, the PTD, or 
5 can be easily generated (e.g., the FCP Type field is always 0x08). 

[0173] FC Initiator to iSCSI Target. The FCP to iSCSI translation is the 

reverse of the iSCSI to FCP translation. Again, the translation is performed at the 
egress PPU. The FCP initiator will first send an FCP command, which must be 
1 0 translated for the iSCSI target: 



Table 8 



from FCP Command IU 


to iSCSI Command PDU 


FCP_LUN 


LUN 


FCP_CNTL 


ATTR 


FCP_CDB 


CDB 


FCP_DL 


Expected Data Transfer Length 




CmdSN, task tag, ExpStatSN 



20 [01 74] As shown in Table 8, the LUN, CNTL, CDB, and DL fields of the FC 

IUmap into the LUN, ATTR, CDB, and Data Transfer Size fields of the iSCSIPDU. 
In addition, variab les that are unique to the iS CSI PDU are created by the PPU such as 
CmdSN and a task tag, both of which can be obtained from the ETCB. Note that the 
DataSegmentLength field will be zero as there will be no immediate data for FCP 

25 frames. 

[01 75] After the iSCSI target has received the command (and the command is 

a write command), the target will respond with an R2T PDU, which must be translated 
into an FCP XFR_RDY IU: 
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Table 9 



5 



from iSCSI R2T PDU 


to FCP XFRJRDY IU 


Buffer Offset 


DATA_RO 


Data Transfer Length 


BURST_LEN 




RXJD, SEQ_ID 



[0176] As shown in Table 9, the Buffer Offset and Data Transfer Length fields 

of the iSCSI PDUmap into the DATA_RO and BURSTJLEN fields of the XFR_RDY 
IU. In addition, the PPU also adds variables unique to the FCP IU such as RX_ID and 
1 0 SEQ_ID, available in the ITCB . 

[0177] After the FC initiator receives theXFR_RDY IU, it will send write data, 

which needs to be translated into an iSCSI format: 



Table 10 



from FCP Data IU 


to iSCSI Write data PDU 


RLTV_OFF 


Buffer_offset 


payload 


payload 




Data SN, ExpCmdSN, target task tag 



20 [0178] As shown, for write data, theRLTV_OFF of the FCP IU maps into the 

Buffer_offset field of the iSCSI PDU, while the payload for each is the same. In 
• addition, other fields are taken from the ETCB, including variables like DataSN, which 
is unique to the iSCSI Data PDU. 

[0179] If the original initiator command was a read command, then the iSCSI 
25 target will respond with read data that must be placed in FCP format: 
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Table 11 



from iSCSI Read Data PDU 


to FCP DATA IU 


Buffer_Offset 


RLTV_OFF 


payload 


payload 




RXJD, SEQ_ID 



[0180] Asshownin Table 11, the Buffer_offiet field 

field of the FCP IU, and the payload for both is the same. In addition, the PPU must 

add variables that are unique to the FCP IU such as RX ID and SEQ_ID, which can 
» 

10 be found in the ITCB. 

[01 81] Finally, once the task is complete, the iSCSI target will send aResponse 

PDU, which must be translated to the FCP RSP IU: 



Table 12 



from iSCSI Response PDU 


to FCP RSP IU 


Flags and status 


FCP_STATUS 


DataSegmentLength 


FCP_SNS_LEN 


BasicResidualCount 


FCP_RESID 


Sense data 


FCP_SNS_INFO 


transport errors 


FCP_RSP_INFO 




OX_ID, SEQJD 



[0182] As shownin Table 12, the flags and status fields oftheiSCSIPDU map 

to the STATUS field of the FCP IU. The iSCSI fields DataSegmentLength, 
25 BasicResidualCount, and Sense Data all map to FCP_SNS_LEN, FCP_RESID, and 
FCP_SNS_INFO, respectively, of the FCP IU. Transport errors are mapped to the 
FCP_RSP_INFO field of the FCP IU. In addition, variables that are unique to the FCP 
IU, such as OXJD and SEQJD are added by the PPU. 
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[0183] If an iSCSI task management packet such as Abort Task Set is 

received, it will be sent to the FC device using an NOP command with the task 
management flags in the FCP_CNTL field. 

[0184] Note that not all fields that are unique to either the iSCSI PDUorFCP 

5 frame are listed in the above-described tables. Reference canbemade to Figs. 8a-8i 
for a complete listing of fields. It is to be understood that for any unlisted fields the 
information can be obtained from the relevant task control block, the VTD, the PTD, or 
can be easily generated (e.g., the FCP Type field is always 0x08). 

10 Storage Services 

[0185] A switch in accordance with an embodiment of the invention can provide 

switch-based storage services at wire speed, again by distributing tasks on multiple 
linecards, thereby maximizing throughput. Storage services that are provided in one 
embodiment of the invention include local mirroring, mirroring over slow link, snapshot, 

1 5 virtual target cloning (replication), third party copy, periodic snapshot and backup, and 
restore. Each of these services will be described in further detail below. Other 
embodiments may provide more or fewer services. 

[0186] Before discussing specific services, referring to Fig. 24, in general, 

storage services are initially activated by a management station (or other device) over an 

20 ethernet connection to the storage switch, step 2402 . Such ethemet communication 
occurs in one embodiment with the SCC 6 1 0 (Fig. 6). The SCC through its database, 
determines the linecards for the service and passes all relevant information to perform 
the service to those linecards, including VTD and LUN information, step 2404. All 
information is passed from the SCC to the linecards using intercard communication over 

25 the ethernet connection that the SCC has with each linecard. The linecards thenperform 
the actual service requested, step 2406. When the task is completed, the SCC will 
initiate a response to be returned to the management station, step 2408, indicating that 
the service is complete. Hence, unlike conventional systems, the management station 
need not be involved in the service at all except to initiate a request for the service. 
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Local Mirroring 

[01 87] When a virtual target is mirrored, i.e., an identical copy of the data is 

stored in two separate physical locations, often referred to as "members" of the mirrored 
virtual target. The FlowID in the VTD indicates that the packet is to be multicast to 
5 multiple egress ports. In a mirrored virtual target, when a write command crosses an 
extent boundary, the PPU will duplicate the packet for each extent for each member of 
the mirrored target. The PPU also provides proper FlowIDs to the traffic manager, 
which in turn sends each command it receives to multiple egress ports. When reading 
from a mirrored virtual target, the PPU selects the one member of the mirrored target 

1 0 that has the smallest average response time. The FlowID of that member directs the 
read command to the selected egress port. The response time is available in the VTD. 
[0188] In the event that the R2T or XFR_RDY is received from one of the 

members of a mirrored target after sending a write command, then the PPU waits until 
every member and/or extent has returned the R2T or XFRRDY. Once all members 

1 5 have responded, then the PPU will prepare to send the initiator the R2T or XFRJRDY 
that specifies the smallest block available to receive data: when the data is returned, it 
will be multicast to all mirrored members, but a member cannot receive more data then 
it has requested. Thus, the PPU must also track in the ITCB the amount of requested 
data specified in the R2T or XFR_RDY for each extent. Once the smallest amount of 

20 data is received (from the initiator) and multicast to each member of the mirrored target, 
then the PPU waits for the extent that asked for the smallest amount of data to send 
another R2T or XFR_RDY. In the event that two (or more) targets asked for the 
smallest amount of data (i.e., they both asked for the same amount), then the PPU waits 
until both (or all) targets that asked for the smallest amount to send another R2T or 

25 XFR_RDY. Then the PPU returns another R2T or XFR_RDY of the smallest 
remaining amount of all the extents. The process continues until all of the extents have 
all the required data. An example is shown in Table 13 below: 
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Table 13 





Extent 1 


Extent 2 


To 
initiator 


Total Data to be written 


4k 


4k 




Size specified in first R2T or XFR_RDY 


2k 


3k 




PPU requests from initiator 






ZK 


Unsatisiied R2T or XrK_KDY (alter zk 
written) 


UK 


1 V 




Size specified in second R2T or 
XFRRDY 


2k 






PPU requests from initiator 






lk 


Unsatisfied R2T or XFRJRDY (after lk 
written) 


lk 


Ok 




Size specified in third R2T or XFR_RDY 




lk 




PPU requests from initiator 






lk 


Unsatisfied R2T or XFR RDY (after lk 
written) 


Ok 


Ok 





Remote Mirroring Over Slow Link 
[01 89] As previously discussed, mirroring occurs when two identical sets of 

20 data are each respectively stored in separate.physical locations. Most conventional 
systems only support local mirroring- that is, mirroring in devices that are both on the 
same SAN. However, an embodiment of the invention supports mirroring over slow link 
- for instance, when one copy of data is on one SAN and a second copy is stored at a 
remote location from the SAN, e. g. , on a second SAN. For instance, referring to Fig. 

25 4, a local copy of the data maybe in SAN 402 while a remote mirrored copy may be 
in SAN 404. Thus, remote mirroring is made possible in a switch in accordance with 
an embodiment of the invention that enables exporting (or importing) of data to a target 
through a WAN such as the Internet. 
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[0190] One significant distinction between mirroring over slow link and local 

mirroring, however, is the latency inherent in communicating with the remote target For 
instance, the average latency when communicating over a WAN with a remote target is 
8 imspermile. Thus, ifa remote target is halfway around the globe, thelatencyis 100ms 
5 (200 ms round trip), which will be significantly slower than when communicating with a 
local target. 

[0191] In one embodiment, in mirroring two (ormore) local virtual targets, as 

previously described after a write command is sent, a switch in accordance with the 
invention will wait to receive an R2T or XFR RDY from all targets before requesting 

1 0 write data from the initiator (e.g., the server). Then the write data is multicast to all 
targets. For mirroring over slow link, however, to avoid a long network latency, the 
switch does not wait to receive an R2T or XFRJRDY from the remote target. Instead, 
when the switch receives an R2T or XFRJRDY from the local target, it immediately 
requests the write data from the initiator and writes to the local target. When the linecard 

15 connecting to the remote device receives the R2T or XFR RDY from the remote target, 
it reads the data from the local target and then writes it to the remote target. 
[0192] More specifically, referring to Fig. 25, a switch will receive a write 

command from a server, step 2502. As with local mirroring, the ingress PPU will 
multicast the command to the egress linecards for both the local and remote target, step 

20 2504. However, the FlowID of the command destined for the remote target is aspecial 
FlowlD so that the packet will be directed to the egress linecard CPU, instead of being 
handled directly by the PPU as would be done in other circumstances. Still, the packet 
destined for the local target is handled by the PPU. The command is then sent to each 
of the targets, local and remote, by the respective egress linecards, step 2506. 

25 [0193] Due to network latency, anR2TorXFR_RDYwillbereceivedbythe 

switch from the local target first, step 2508. The R2T or XFRJRDY is then passed 
back to the initiator (server), step 2510. The initiator will then send its write data to the 
switch, and the data are then passed to the local target for writing, step 25 12. When the 
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write is finished at the local target, the local target will send a response packet indicating 
that the task is complete, step 2514. 

[0194] Eventually, an R2T or XFRRDY is received from the remote target by 

the linecard, step 25 1 6 . Note that because the CPU for the linecard connecting to the 
5 remote target sent the write command, the remote R2T or XFR_RDY is received also 
by the linecard CPU, which manages the commands to the remote target. The linecard 
CPU for the remote target converts the received R2T or XFR_RDY to a read command 
to the local target, step 2518, to read the data previously written. The read data 
received from the local target is received by the PPU of the linecard for the remote 
1 0 target, step 2520. The PPU then forwards the read data as write data to the remote 
target, step 25 22. When the write is complete, the remote target will send a Response 
packet so indicating, which packet is received by the linecard CPU for the remote target, 
step 2524. The linecard CPU receives the status for both the read and write commands. 

1 5 [01 95] If an R2T orXFRJRDY of the remote target is received before the local 

write is complete, the remote linecard waits until the local write is complete before 
proceeding to read the data from the local target, in one embodiment. 
[0196] In the event there is an error from either the read or the write, the 

linecard CPU reports the error to the SCC. In the event of an error, the remote target 

20 will be out-of-sync with the local one and the linecard. 

[0197] Thus, forthe local target, the write commands are executed on the PPU 

of the linecard of the local target. But for the remote target, the write commands are 
managed by the CPU of the linecard for the remote target except that the PPU of that 
linecard forwards the read data as write data. 
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Snapshot 

[0198] "Snapshot" is generally mirroring a virtual target up until a particular point 

in time, and then breaking away the mirrored member, thereby freezing the mirrored data 
in the mirrored member at the time of the break away. In other words, a seeming 
5 "snapshot" of the data at a particular time is kept. Once a snapshot is taken, a user can 
access the removed member (as another virtual target) to retrieve old information at any 
time without requiring a restore. Hence, by using "snapshot," some users of a switch in 
accordance with the invention will avoid the need to perform traditional backups and 
restores. Moreover, by using a switch in accordance with the invention, snapshots can 

10 be made quickly, taking only a few milliseconds, compared to traditional backup which 
may require a backup window of hours to copy a virtual target to tape media (and 
usually also preventing access to the data being copied). Snapshot of a virtual target can 
also take place at regular intervals. Further, each snapshot can be a different member 
of the mirrored virtual target, allowing for the availability of multiple snapshots (e.g., a 

15 snapshot from Tuesday, one from Wednesday, etc.). 

[0199] Specifically, referring to Fig. 26, to perform snapshot services in 

accordance with one embodiment of the invention, a snapshot request is received from 
a management station by the switch, step 2602. The SCC informs the ingress linecard 
CPU (the linecard that connects to the server) of the change to remove a mirrored 

20 member, step 2604. The SCC also updates the virtual target object in the SCC 
database. The linecard CPU updates the FlowID stored in the VTD (in the PPU 
SRAM) for the virtual target so that it no longer reflects the removed member, step 
2606. With this change, the incoming writes are no longer multicast to the removed 
member. Once the VTD is updated, the CPU acknowledges the change to the SCC, 

25 which in turn sends a response back to the management station to indicate that the 
snapshot is complete, step 2608. 

[0200] In addition, prior to beginning any snapshot, there should be no 

outstanding requests to the virtual target. Thus, when a snapshot takes place, the server 
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must be notified to quiesce all outstanding requests to the virtual target, in one 
embodiment. The server activity resumes after the snapshot. 

Virtual Target Cloning (Replication) 
5 [0201 ] A switch in accordance with the invention can support the addition of 

anew member to a mirrored virtual target, referred to herein as cloning (or replication), 
and can do so without taking the virtual target offline. In general, a new member is 
added by changing the Virtual Target Object in the SCC database, and the content of 
the mirrored target is replicated onto the new member while normal access is still active 
10 to the virtual target. Depending on the size of the virtual target, the replication will take 
some time to complete. Nonetheless, the replication is controlled by the switch, is 
transparent to the user, and does not generally interfere with access to the virtual target 
by a server. 

[0202] More specifically, referring to Fig. 27, a replicate request is received by 

15 the SCC, step 2702. The SCC sets a cloning-in-progress flag in the Virtual Target 
Object, step 2704, and informs the CPU of the linecard that connects to the server of 
the change, step 2706. The linecard CPU updates the VTD in the PPU SRAM to 
change the FlowID of the virtual target to add the new member, step 2708. With the 
FlowID changed, incoming writes are now multicast. Nonetheless, although incoming 
20 writes are multicast, the FlowID is set to direct writes to the egress linecard CPU for the 
new member so that the CPU handles the writes instead of the PPU. The egress 
linecard CPU will temporarily manage the traffic to the new member until replication is 
complete as described further below. 

[0203] The CPU of the linecard connecting to the new member prepares a 

25 change descriptor specifying the contents of the virtual target to be copied to the new 
member, step 2710. The descriptor sets forth an offset and block count: (offset, block 
count). For example, to copy a 1 0 GB target, the change descriptor is (0, 20,000,000) 
- note that in one embodiment each block is 5 12 bytes and a 1 0 GB target has 20 
million blocks. 
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[0204] Using the change descriptor, the linecard CPU manages the copy 

function a few blocks at a time. First, the linecard CPU sends a write command to the 
new member, step 2712. When an R2T or XFR RDY is returned, step 2714, the 
linecard CPU initiates a read request to the old member, but specifies a FlowID directing 
5 the read data to the linecard CPU of the new member, step 27 1 6. Any read or write 
error aborts the copy and is reported to the SCC. 

[0205] After copying a set of blocks the change descriptor is updated, step 

2718. For example, after copying 50 blocks, the change descriptor for the above 
example becomes (50, 19,999,950), since the first 50 blocks are now in sync. The 
1 0 process o f copying a set ofblocks continues until all of the blocks have been copied, 
step 2720. 

[0206] In theevent that a virtual target is comprised of multiple extents, if each 

extent is coupled to the switch through distinct linecards, then the replication process for 
both extents can be run concurrently. But, if both extents are coupled to the switch 

1 5 through the same linecard, then the replication process must be run sequentially, i.e., the 
second extent cannot be replicated until the completion of replication for the first extent 
[0207] In the meantime, during the replicate process, write requests to the 

virtual target may be received from a server and must be written to the all mirrored 
members, including the member that is still in the process of receiving all of the data of 

20 the virtual target In such an instance, when the write request is multicast, it is received 
by the CPU of the linecard for the new member, step 2722, rather than beingprocessed 
by the PPU on the respective linecards, as it will be for the old members of the mirrored 
target. The linecard CPU determines if the write is to any block that has not yet been 
copied by checking the write location against the offset of the change descriptor, step 

25 2724. If the write is to data blocks that have been already copied, the write command 
is simply passed to the PPU, step 2726. However, if the write is to data blocks that 
have not yet been copied, then the write to the new member is discarded, step 2728, 
and a response to the initiator that the task is complete is sent. Nonetheless, the new 
data will eventually be copied into the new member from the old member during the 
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continuing replication process. The process continues to perform the replication until 
completed, step 2720. 

[0208] In the alternative, if during the replicate process a write request to the 

virtual target is received, then changes made to the virtual target can be tracked by the 
5 linecard CPU. When replication is complete, then those changed and tracked portions 
can be updated. 

[0209] When the replication process is complete, the linecard CPU notifies the 

SCC, step 2730. The SCC updates the Virtual Taiget Object to remove the cloning-in- 
progress flag, step 2732. On the ingress linecard connecting to the initiator, the FlowID 
10 is updated, step 2734, so that write commands follow their normal progression to the 
PPU rather than being directed to the linecard CPU of the new member. 

Third Party Copy 

[021 0] A thirdparty function copies an offline virtual target (one that is not being 

1 5 accessed) to or from an archiving device such as a writable CD or tape drive. The copy 
is termed a 4< third party copy" because the server is not involved until the copy is 
complete — rather the copy is executed by the switch. In many embodiments, such a 
third party copy will be made from a snapshot of a virtual target previously taken. In 
most conventional systems, to perform such a copy the target device must be a "smart*' 
20 device, e.g., a smart tape device, meaning that such a device is generally actively 
involved in and at least partially controls the copy process. In contrast, the third party 
copy service of the present system does not rely on any intelligence outside of the 
storage switch itself. 

[0211] Referring to Fig. 28, the switch will receive a copy request from a 

25 management station, step 2802. The SCC ensures that there are no outstanding 
connections for writing to the virtual target, step 2804. During the copy, the virtual target 
is available for read only in one embodiment. The SCC then sets a copy-in-progress 
flag in the Virtual Target Object in the SCC database, step 2806, to ensure no other 
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connections to the target for writing. The SCC next instructs the CPU for the linecard 
connected to the copy-destination device to execute the copy, step 2808. 
[02 1 2] Each virtual target may be comprised of several extents, each of which 

may be on a distinct physical device. Thus, the CPU for the destination linecard must 

5 obtain data from each extent To do so, the CPU for the destination linecard sends each 
linecaid for each extent an extent descriptor, step 2810. The extent descriptor specifies 
the extent as well as the destination linecard (for the destination copy). The CPUs of 
each of the linecards for the respective extents then set up their respective PPUs (e.g. , 
• the VTDs and CAMs) to enable the PPUs to process the read requests, step 2812. 

10 [0213] After getting the extent linecards set up, the destination linecard CPU 

then sends a write command to the destination device, step 2814. When an R2T or 
XFR RT> Y is received by the destination linecard from the destination device, step 
2816, the destination linecard sends a read command to one of the extents via the 
. respective extent linecard, step 28 18. The Read data is sent directly to the destination 

1 5 linecard and processed by the destination linecard PPU as write data, step 2820, which 
is written to the destination device. The process is repeated until the entire extent is 
copied. Any error condition terminates the copy. Then ifless then all of the extents have 
been copied, step 2822, then the process returns to step 28 1 4, where it is performed 
forthenext extent. If all the extents have been copied, step 2822, then the CPU forthe 

20 destination linecard reports the completion of the copy to the SCC, step 2824. On an 
erroneous completion, the SCC terminates the copy. But if the copy is complete without 
error, then the SCC resets the copy-in-progress flagon the Virtual Target Object in the 
SCC database, step 2826, and reports back to the management station the completion 
status, step 2828. The source virtual target is now available for writing again. 

25 
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Periodic Snapshot & Backup 
[0214] A switchin accordance with an embodiment of the invention can provide 

periodic snapshot and backups of a virtual target. Such a backup function generally 
comprises three steps: 
5 1 . Snapshot the virtual target, 

2. Third party copy the virtual target from the snapshot, and 

3. Rejoin the member carrying the snapshot to the virtual target as a 
mirrored member, and bring current all mirrored data on the member. 

[0215] The thirdstep canbeperformedbyreplication (previously described) 

10 or by otherwise tracking updated data for the virtual target from the time the snapshot 
is taken until the member is rej oined. For instance, a record of all changes made to the 
virtual target can be kept and then the mirrored member is simply updated with those 
changes upon rejoining the virtual target as a mirrored member. 
[02 1 6] If a user has plenty of storage space, the second and third steps may not 

15 be necessary as each snapshot virtual target will be accessible to a user . Thus, it is only 
a matter of allocating the snapshot targets and naming them. For example, if the virtual 
target is to be backed up every workday for the current week, monthly for the last six 
months, and thereafter, quarterly up to one year, then only a finite set of snapshot targets 
need to be allocated that might be named as follows: 

20 

iqn.com.marantinetworks.company.server .master 
iqn.com.marantinetworks.company.server.backup.monday 
iqn.com.marantinetworks.company.server.backup.tuesday 
iqnxom.marantinetworks.company.server.backup.wednesday 
25 iqnxom.marantinetworks.company.server.backup.thursday 
iqn.com.marantinetworks.company.server.backup.friday 
iqn.com.marantinetworks.company.server.backup.february 
iqn.com.marantinetworks.company.server.backup.march 
iqn.com.marantinetworks.company.server.backup.april 
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iqnxom.marantinetworksxompany.server.backup.may 
iqn.com.marantinetworks.company.server.backup.june 
iqn.com.marantinetworks.company.server.backup.july 
iqn.com.marantinetworks.company.server.backup.2000q3 
5 iqn.com.marantinetworks.company.server.backup.2000q4 
iqnxom.marantinetworks.company.server.backup.2001ql 
iqnxom.marantinetworks.company.server.backup.2001q2. 

[02 1 7] The switch allocates the snapshot targets and schedules the periodic 

10 activities according to a known policy. The switch also manages the naming and 
renaming of the targets. For instance, forthebackup.2001q3, the switch will reuse the 
target for the backup.2000q3 and rename it for the backup.2001 .q3. 



Restore 

15 [02 1 8] For various reasons, many industries need to keep backup copies of 

data on archiving media (e.g., typically removable or portable media such as tapes or 
CDs) . The switch can use the third party copy function to move a backup or snapshot 
target to an archiving media. The switch tracks the archiving media on its database. 
Each time a copy to the arcliiving media is performed, the SCC fetches the virtual target 

20 object to determine all destination extents and arecord is entered into a database at the 
management station to track the media Using a management station, a user can view 
a list of archiving media, e.g., a set of tapes or CDs, and select one for restoring. 
[0219] The restore operation itself is another third party copy function to be 

scheduled by the switch. The operation, however, involves user intervention, as 

25 someone must place the media into a tape or CD drive. Nonetheless, as with other 
storage services described herein, the CPU of the source target device controls the work 
for the Restore operation while multiple destination SPU's are involved one at a time. 
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[0220] A switch in accordance with one embodiment of the invention supports 

three different priorities of restoring: urgent, important, and normal. An urgent restore 
is started immediately regardless of the current traffic situation on the system. An 
important restore is not started when there is congestion in the system, but is started 
5 within a few hours. A normal restore is completed within 24 hours depending on the 
traffic congestion of the system. 

Conclusion 

[022 1 ] Thus in accordance with an embodiment of the invention, a storage 

10 switch has been disclosed that provides wine-speed processing of data packets, 
including classifying the packets, performing virtualization functions on the packets, and 
performing any necessary protocol translation of the packets. Compared to 
conventional practices, the architecture disclosed allows the required time to process a 
packet to be minimal. Such wire-speed processing is in part accomplished by 
15 distributing the intelhgen^ and generally avoiding the 

need for buffering. Such distributed intelligence allows a system that not only has ahigh 
bandwidth but is also easily scalable. Further, such a switch, using its linecards can also 
perform serverless storage services, that is, services where no entity outside of the switch 
need be involved in the control of performance of such services. 
20 [0222] It should be understood that the particular embodiments described 

above are only illustrative of the principles of the present invention, and various 
modifications could be made by those skilled in the art without departing firm the scope 
and spirit of the invention. Thus, the scope of the present invention is limited only by the 
claims that follow. 
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CLAIMS 

What is claimed is: 

5 1. A switch for use in a network, comprising: 
a plurality of linecards, each including: 
a plurality of ports; and 

a plurality of processing units, wherein each processing unit is associated 
with at least one port, thereby distributing processing resources amongst linecard 
10 ports. 

2 . The switch of claim 1 , wherein additional linecards can be added to the plurality of 
linecards. 

15 3 . The switch of claim 1 , wherein linecards can be removed from the plurality of 
linecards. 



20 



, 4. The switch of claim 1 , wherein each linecard is designed to handle packets formatted 
in accordance with any respective one of a plurality of protocols. 



5. The switch of claim 4, wherein: 

a first set oflinecards in the plurality is designed to send and receive packets in 
accordance with an iSCSI protocol; and 

asecond set oflinecards in the plurality is designed to send and receive packets 
25 in accordance with a Fibre Channel protocol. 



6. The switch of claim 4, wherein one of the plurality of protocols is Infiniband. 



WO 03/027886 



PCT/US02/30974 



-66- 

7. The switch of claim 1, wherein the switch is capable of processing packets without 
buffering the packets. 

8 . The switch of claim 1 , wherein the switch is capable of processing packets at wire 
5 speed. 

9 . The switch of claim 1 , wherein the switch is capable of receiving a packet at a first 
port of a first linecard destined for a virtual target and formatted in accordance with a 
first protocol, determining if the packet is a data or control packet, and if the packet is 

1 0 a data packet, sending the packet formatted in accordance with a second protocol to 
a physical target, all without buffering the packet, 

1 0. The switch of claim 1 , wherein the switch is capable o f receiving a packet at a first 
port of a first linecard destined for a virtual target and formatted in accordance with a 

1 5 fiist protocol, determining if the packet is a data or control packet, and if the packet is 
a data packet, sending the packet formatted in accordance with a second protocol to 
a physical target, all at wire speed. 

11. The switch of claim 1 , wherein the switch is capable of performing a storage service 
20 at the request of a second device without any additional involvement of the second 

device. 

12. The switch of claim 11, wherein the second device is a server. 

25 13. The switch of claim 1 1 , wherein the second device is a management station. 

14. The switch of claim 1 1 , wherein the storage service is any one of local mirroring, 
mirroring over slow link, snapshot, replication, third-party copy, periodic backup, and 
restore. 
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15. A switch for use in a network, comprising: 

a plurality of linecards, each linecard including: 
a plurality of ports; 

a plurality of processing units, wherein each processing unit is associated 
5 with at least one port and is associated with a memory; 

a CPU in communication with the processing units; and 
a fabric in communication with each linecard, thereby allowing packets to pass 
from an ingress linecard to an egress linecard. 

10 16. The switch of claim 15, wherein: 

each processing unit includes a packet aggregation and classification unit and a 
packet processing unit; and 

the associated memory includes a CAM and an SRAM. 

15 17. The switch of claim 15, wherein the associated memory is included in the processing 
unit. 

18. The switch of claim 15, wherein the associated memory is associated with each 
processing unit. 

20 

1 9 . The switch of claim 1 5, wherein the switch further includes a traffic manager in 
communication with each processing unit. 

20. A switch for use in a system for storing and accessing data, the switch comprising: 
25 a plurality of linecards, each linecard including: 

at least one port and at least one processing unit, wherein each 
processing unit is associated with at least one port, and each processing 
unit includes a classifier, a virtualizer, and a translator; 

a CPU in communication with each processing unit; and 
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a fabric in communication with each linecard. 

2 1 . A switch for use in a system for storing and accessing data, the switch comprising: 

a plurality of linecards, each linecard including: 
5 at least one port, and 

means associated with each port for performing wire speed processing 

of packets. 

22. The switch of claim 2 1 , wherein processing of packets includes at least one of data 
10 packet visualization and data packet protocol translation. 

23 . The switch of claim 22, wherein processing of packets further includes classifying 
packets as data packets or control packets. 

15 24. A storage network, comprising: 

a switch including a plurality of linecards, each linecard including: 
a plurality of ports, and 

aplurality of processing units, wherein each processing unit is 
associated with at least one port; and 
20 a plurality of initiators and targets, 

wherein a first set of initiators and targets operate in accordance with a 
first protocol and a second set of initiators and targets operate in accordance 
with a second protocol, and 

wherein a third set of initiators and targets are local with respect to the 
25 switch and a fourth set of initiators and targets are remote with respect to the 

switch. 

25 . The storage network of claim 24, wherein the first set, the second set, the third set, 
and the fourth set are not mutually exclusive. 
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26. The storage network of claim 24, wherein the storage network includes a plurality 
of switches, each switch including a plurality of linecards, eachlinecard including a 
plurality of ports and a plurality of processing units, wherein each processing unit is 
associated with at least one port, wherein some of the switches are remotely located with 

5 respect to other switches. 

27. The storage network of claim 24, wherein the switch is designed to process data 
packets, including virtualization and translation, without buffering the data packets. 

28. The storage network of claim 24, wherein the switch is designed to process data 
1 0 packets, including virtualization and translation, at wire speed. 

29. The storage network of claim 24, wherein each linecard is designed to handle 
packets formatted in accordance with any respective one of a plurality of protocols. 

15 30. The storage network of claim 24, wherein additional linecards can be added to the 
plurality of linecards. 

3 1 . The storage network of claim 24, wherein linecards can be removed from the 
plurality of linecards. 

20 

32. The storage network ofclaim 24, wherein the storage network includes a plurality 
of switches, each including a plurality oflinecaids, each including aplurality of ports and 
a plurality of processing units, wherein each processing unit is associated with at least 
one port, and wherein additional switches can be added to the plurality of switches. 

25 

33. The storage network of claim24, wherein the storage network includes a plurality 
of switches, each including a plurality of linecards, each including a plurality of ports and 
a plurality of processing units, wherein each processing unit is associated with at least 
one port, and wherein additional switches can be removed from the plurality of switches. 
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34. The storage network of claim 24, wherein the storage network includes a plurality 
of switches, each including aplurality of linecards, each including a plurality of ports and 
aplurality of processing units, wherein each processing unit is associated with at least 
one port, wherein only one management station i s required to manage the plurality of 

5 switches. 

35. A storage network, comprising: 

a switch; 

a server in communication with the switch, the server operating in accordance 

1 0 with a first protocol; 

a storage device in communication with the switch, the storage device operating 

in accordance with a second protocol; 

the switch having an input for receiving a data access command for a virtual 
target formatted in accordance with the first protocol; and 
1 5 the switch having an output for sending the data access command to a physical 

target formatted in accordance with the second protocol at wire speed. 

36. The storage network of claim 35, wherein the switch includes a plurality of 
linecaids, eachlinecard including aplurality of ports and a plurality of processing units, 

20 wherein each processing unit is associated with at least one port. 

37. The storage network of claim 35, including a plurality of switches. 

38. Thestorage network of claim 37, wh^ 
25 to manage the plurality of switches. 

39. The storage network of claim 37, wherein some of the switches are remotely 
located with respect to other switches. 
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40. The storage network of claim 35, wherein the server is remotely located with 
respect to the switch. 

41 . The storage network of claim 3 5, wherein the storage device is remotely located 
5 with respect to the switch. 

42. A method for use by a device in a system for storing and accessing data, the 
method comprising: 

receiving apacket from an initiator destined for a virtual target and formatted in 
10 accordance with a first protocol; and 

sending thepacket to aphysical target formatted in accordance with a second 
protocol at wire speed. 

43. A method for use by a device in a system for storing and accessing data, the 
1 5 method comprising: 

receiving a packet from an initiator destined for a virtual target and formatted in 
accordance with a first protocol; 

determining if the packet is a data or control packet; 
if a data packet, sending the packet to a physical target formatted in accordance 
20 with a second protocol; and 

wherein all of the above steps are performed without buffering. 

44. The method of claim 43, wherein all of the steps are further performed at wire 
speed. 



v'p 03/027886 



Page 74 of 113 



WO 03/027886 PCT/US02/30974 

1/38 




.VO 03/027886 Page 75 of 113 



WO 03/027886 PCT/US02/30974 

2/38 



3| 



a> 
E 

<D 
■+—> 




CM 



CM 

CJ> 



O 



< 

co 



<VO 03/027886 



Page 7 7 of 1.13 



WO 03/027886 



PCT/US02/30974 



4/38 




111 



nn 



C 
CD 

f 



ioi 



CD 

E 



CD 



NV1 



NV1 



.■JO 03/027836 



Paae78of 113 



WO 03/027886 



PCT/US02/30974 



5/38 



O 
u_ 

o 

UJ 



!§=§ 



o 

CO 




CD 
LL 



m 



E 

JC 

-4— » 



1100 



19DDD 



E 
a> 

JC 



NV1 



NV1 



VO 03/027886 



Page 79 of 113 



WO 03/027886 



PCT/US02/30974 



6/38 




CO 
CD 




CO 









CO 




"S 




s 

© 




c 




O 




LL 



CO 

<D 
CO o 

I ^ 
IS 

c 
to 




vVO 03/027886 



Page SO of 113 



WO 03/027886 



PCT/US02/30974 



7/38 




fTTTTTTT 



WO 03/027886 . _ Page 81 of 11 3 



WO 03/027886 PCT/US02/30974 

8/38 



CO 



c 

g 

to 

— o 
o 



CO ^ 

r <o 

q> e 

3, E co 

o CD 2 

SIB 

Q Q =3 J7 



Q 5 (D , 
> U. Ol % 



8 



E 
<d 

CO 

c 
o 

Q-_ 
co Z 

q: rl 



X 
CD 
"D 

C. 

O 
-Q 

2 

-4-* 

c 

8 

Q_ 
O 



Q CO 

31 
as 

«'3 



CO 
CD 

o 
cz 

CD 
13 
Or 
CD 
CO 

c 

CD 
CL 
O 

"co 

"5 



WO 03/027886 



PCT/US02/30974 



Byte 



0 
4 
8 

16 
20 
24 
28 
32 



48 



Byte 



16 
.20 
24 
28 
32 
36 
40 
44 
48 





9/38 




Byte 0 


I Bytel I Byte 2 


I Byte 3 


X I 0x01 


FRW00 ATTR Rsvd 


CRN or Rsvd 


TotalAHSLength 


DataSegmentLength 


Logical Unit Number 




(LUN) 






Initiator Task Tag 


Expected Data Transfer Length 


CmdSN 


ExpStatSN or ExpDataSN 


SCSI Command 




Descriptor Block (CDB) 






iSCSI Command PDU 






Fig. 8a 




ByteO I 


Bytel | Byte 2 I 


Byte 3 I 


1 1 0x31 


1 Rsvd (0) 





Rsvd (0) 



Initiator Task Tag 



Target Transfer Tag 



StatSN 



ExpCmdSN 



MaxCmdSN 



R2TSN 



Buffer Offset 



Desired Data Transfer Length 



iSCSI R2T PDU 

Fig. 8b 



WO 03/027885 Page 83 of J 1 3 



WO 03/027886 PCT/US02/30974 



10/38 

Byte ByteO ' Bvle 1 ' B ^ e2 ' By* 33 



4 
8 

16 
20 
24 
28 
32 
36 
40 
44 
48 



0 
4 
8 

16 
20 
24 



0 0 0x05 



Rsvd (0) 



Rsvd (0) 



DataSegmentLength 



LUN or Reserved (0) 



Initiator Task Tag 



Target Transfer Tag or Oxffffffff 



Rsvd (0) 



ExpCmdSN 



Rsvd (0) 



DataSN 



Buffer Offset 



Rsvd (0) 



Data 



iSCSI Write Data PDU 

Fig. 8c 



ByteO I Bvte1 I Byte 2 I Byte 3 | 



1 1 0x25 



Rsvd (0) 



O US 



Rsvd (0) 



Status or Rsvd 



DataSegmentLength 



Rsvd (0) 



Initiator Task Tag 



Rsvd (0) 



oo StatSN or Rsvd (0) 
' ExpCmdSN 



32 
36 
40 
44 
48 



MaxCmdSN 



DataSN 



Buffer Offset 



Residual Count 
Data 



iSCSI Read Data PDU 

Fig. 8d 



WO 03/027886 



PCT/US02/30974 



11/38 



ByteO I Byte" 1 ' B ^ e 2 1 Bvte 3 1 



1 1 0x21 



1 rsv 0 u 0 u 0 



Status 



Response 



Rsvd (0) 



DataSegmentLength 



Rsvd (0) 



Initiator Task Tag 



Basic Residual count 



StatSN 



ExpCmdSN 



MaxCmdSN 



ExpPataSN or Rsvd (0) 



ExpR2TSN or Rsvd (0) 



Bidi-Read Residual Count 



Sense Data and Response Data (optional) 



iSCSI Response PDU 

Fig. 8e 



WO 03/027886 ?a°e 85 of 113 



WO 03/027886 PCT/US02/30974 



12/38 



Bits 
Word 


31-24 


23-16 


15-08 07-00 


0 


RCTL 


D_ID 


1 


rsvd 


S_ID 


2 


TYPE 


F_CTL 


3 


SEQJD 


DF_CTL 


SEQ_CNT 


4 


OXJD 


RXJD 


5 


RLTV_OFF 



FC Frame Header 

Fig. 8f 



Field Name 


Description 


Size 


FCPJ.UN 


logical unit number 


8 bytes 


FCP_CNTL 


control field 


4 bytes 


FCP_CDB 


SCSI command descriptor block 


16 bytes 


FCPJDL 


Data Length 


4 bytes 



FCP_CMND Payload 

Fig. 8g 



WO 03/027886 



PCT/US02/30974 



13/38 



Reld Name 


Description 


Size 


DATAJRO 


Relative offset of first byte of 
FCP_RATA IU that follows 


4 bytes 


BURST LEb 


length of FCP_DATA IU that follows 


4 bytes 


rsvd 




4 bytes 



FCP_XFR_RDY Payload 

Fig. 8h 



Field Name 


Description 


Size 


rsvd 




4 bytes 


rsvd 




4 bytes 


FCP_STATUS 


field validity and SCSI status 


4 bytes 


FCP_RESID 


residual count 


4 bytes 


FCP_SNS_LEN 


Length of FCP_SNSJNFO field 


4 bytes 


FCP_KSP_LEN 


Length of FCP_RSPJNFO field 


4 bytes 


-CPJRSPJNFO 


FCP response info 


m bytes 


FCP_SNSJNFC 


> FCP sense info 


n bytes 



FCP_RSP Payload 

Fig. 8i 



WO 03/027886 ... Page B 7 of 1 13 



WO 03/027886 PCT/US02/30974 



14/38 




vVO 03/027886 



Page 89 of 113 



WO 03/027886 



PCT/US02/30974 



15/38 



payload 


iSCSI 
header 


TCP 


IP 


MAC 


—1002 


L 


M008 v 1006 M009 
1010 

r 




payload 


iSCSI 
header 


local 
header 


_1004 



Fig. 1 0a 



1016 



1014 



1012 



new 
payload 


iSCSI 
header 


remaining 
payload 


TCP 


IP 


MAC 



-1030 



1020 



1028 




1024 



-1022 



new 
payload 


iSCSI 
header 


local 
header 




remaining 
payload 


local 
header 


; 




v 1026 




1018 



Fig. 10b 



WO 03/027886 



PCT/US02/30974 



16/38 



1100 

Local Header 

VTDID 

FlowlD 

TCP Control Block Index 

Type 

Size 

Task Index 

Source (Port, PACE, Linecard, CPU) 
Destination (Port, PACE, Linecard, 
CPU} 



Fig. 11 



WO 03/027886 



WO 03/027886 



Page 90 of 11.3 



PCT/US02/30974 



17/38 




7 



-1202 



eceive packet ar 
port 





Fig. 12b 

(classification - PACE - 
FCP - egress) 



WO 03/027886 



PCT/US02/30974 



18/38 




Fig. 13a 

(Classification - PPU - 
ingress) 



Fig. 13b 

(Classification - PPU - 




egress) 



WO 03/027886 



PCT7US02/30974 



19/38 

.1402 




/"send to TMTx 

4 1 6 



WO 03/027886 



Page 93 of 113 



WO 03/027886 



PCT/US02/30974 



20/38 

receive cmd pkt 
from fabric/TM 502 




1504 

allocate ETCB and\ 

Task Index . / 1 506 



convert to 1508 
)hysical addr^ 



/generate CmdSN <x 
vT sequence ID *y~—i5io 





frarrfe 



>nstruct or update FCP 
leader or copy TCP Ctrl Blk Index^ 
to local header, 
provide flags/variables ^>^-1512 



T 



C- "-OS. 1 £ 
to PACE 



1514 




remove local 
header 




1516 



T 



Cto outgoin^N 
nortJ^S 



1518 



Fig. 15 

(Virtualization - 
Egress - cmd) 



WO 03/027886 



Page 94 of 113 



WO 03/027886 



PCT/US02/30974 



21/38 



col 
in o 



. <*> 

CD cd 
— t — 
1 I CD 
LU 






o 



€0 




— 1 CO 



WO 03/027886 



PCT/US02/30974 



22/38 
1602 




Fig. 16 

(Virtualization - Ingress - 
R2T/XFR_RDY) 



WO 03/027886. 



Page 96 of 113 



WO 03/027886 



PCT/US02/30974 



23/38 



1702 




1706 



construct or update 
FCP header 




1708 



1710 




specifiy port # 




1712 




to PACE 




1714 



remove local header 




1716 




r 



to port 




1718 

Fig. 17 

(Virtualization - Egress 
R2T/XFR_RDY) 



WO 03/027886 



Page 98 of 113 



WO 03/027886 



PCT/US02/30974 



25/38 



I Receive write data 
I packet from PACE 



1802 




identify ITCB 




1804 



"Update amount o 
date transferred 




1806 




update local header with 
FlowlD, Task Index 




1808 




to TM/fabric 




1810 



Fig. 18 

(Virtualization - Ingress - 
write data packet) 



WO 03/027886 



Paoe S9 of 113 



WO 03/027886 



PCT/US02/30974 



26/38 




1902 



1908 



to port ^> 



1914 



Fig. 19 

(Virtualization - Egress - 
write data pkt) 



WO 03/027886 Paae 1 00 of 1 1 3 



WO 03/027886 PCT/US02/30974 

27/38 




WO 03/027886 



Page 1 PI. of 113 



WO 03/027886 



PCT/US02/30974 



28/38 




Receive read data pkt from 
target 




2002 




identify ETCB 




2004 




^--2006 
verify order *j 




copy VTD ID, Task 
Index, and FlowlD to 
local header 




2008 




to TM/fabric 




2010 



Fig. 20 

(Virtualization - Ingress - 
Read Data pkt) 



I 



Page 102 of 113 



WO 03/027886 



PCT/US02/30974 



29/38 




Receive read data pkt 
from TM/fabric 




2102 




Identify ITCB 




2104 




retrieve 
in'rtator_task_tag or 
OX ID 




2106 



generate DataSN or Sequence 
ID; variables/flags 




2108 



2110 



2112 




2114 



Fig. 21 

(Virtualization - Egress- 
Read Data pkt) 



WO 03/027886 



Page 103 of 1 13 




WO 03/027886 



Page 1 04 of 113 



WO 03/027886 



PCT/US02/30974 



31/38 



Receive response 
packet from target 




2202 




identify ETCB 




2204 




copy Task Index, VTD ID, and 
FlowlD to local header 




206 




to TM/fabric J 

_ — -^"2208 




release ETCB 




2210 



Fig. 22 

(Virtualization - Ingress - 
response pkt) 



WO 03/027886 _ Page 105 of 113 



WO 03/027886 PCT/US02/30974 





decrement VTD 
command #s 




2306 



i 



generate LUN, iSCSI ExpStatSf 
or FCP Sequence ID; proper FCP 
header; flags/variables 




2308 



2310 



2314 



(^^toport^^ 



(^re| 



2318 



-2316 



Fig. 23 

release ITCB ) (Virtualization - Egress 

response pkt) 



WO 03/027886 



Page 106 ofl 13 



WO 03/027886 



33/38 



PCT/US02/30974 



LU 
O 
< 
CL 

O 
Ol 
^> 

CD 

S> 

CO 



CD 

sz 

8 
o 





















O 




■ 






CL 




O 








L. 




o 








S3 




±o 




CO Li- 




O 




CO 











CO 

CO o 
CM « 
OJ £ 

.O) CO 

Li- CD 

CD 

c 



.9 



® ^ L_ ^ CO 

xj Q Q ^ r- Q — 



c — CO « 



X 



CO 
CO 



CD 
CO 

CO o 

co 8- 



CO 
CO 

CD 
LU 




WO 03/027886 



PCTYUS02/30974 



34/38 




Fig.24 



WO 03/027886 



PCT/US02/30974 



35/38 



2502- 



receive write 
'command from server] 
(at local switch) 



2504 




multicast command to 
egress linecards of local & 
remote targets 



2506 



2508 



2510 



2512 



2514 




2518 




"CPU converts R2T to £f 
-►^ read command from local 
target 



2520- 



"PPU of egress linecard for 
remote target receives read 
data from local target 



2522 




'PPU forwards read data as write^ 
data to remote target 




2524- 



JPU of egress linecard for remote 
target receives status for both 
read and write commands 



WO 03/027886 Page 109 oM 13 

■s * 

\ 

» i 

WO 03/027886 PCT/US02/30974 



36/38 



2602-^- 

f receive snapshot 
\request from server/ 



2604 _ 

SCC notifies 
Jinecard of change/ 



260i 

update VTD 





2608^ 



'CPU acknowledges^ 
change to SCC 



Fig. 26 



WO 03/027886 



Paae 110 of 113 



WO 03/027886 



PCT/US02/30974 



2702-^— 



37/38 



2704- 



2706- 



2708- 



/receive clone 
f request from 
\. server 



'set cloning-in> 
progress flag in 
VT object 

Inform ingress^ 
linecard CPU 



tlpdate FlowlBlriX 
VTD to add new ) 
member ^/ 



271 



2712 





prepare 
change 
escriptoi 

I 

CPU sends write 
md to new member/ 




2714 



2716- 




receive R2T or 
XFR RDY 



T 




IPU initiates reac 
request to old member 
with Flow ID to new 
member 



2718 



/update change^ 
v. descriptor 



272C 



'continue to copy 
block by block until 
complete 



Fig. 27 



2722 



no 





273( 

/notify SCC thaf 
** complete 



2732-^ ± 




2734 



WO 03/027836 

_ 



Page .111 of 113 



WO 03/027886 



PCT/US02/30974 



38/38 



2802 



2808 

/^CC instructs CPUot\ 




2810 



2814 



Fig. 28 



VVO .03/027886. 



Page 112 of 1 13 



INTERNATIONAL SEARCH REPORT 


International application No. 
PCT/US02/30974 


A. CLASSIFICATION OF SUBJECT MATTER 

lrKs\t) VJvlOr Lji I / j 

US CL : 709/226 
According to International Patent Classification (IPC) or to both national classification and IPC 


B. FIELDS SEARCHED 


Minimum documentation searched (classification system followed by classification symbols) 


Documentation searched other than minimum documentation to the extent that such documents are included in the fields searched 


Electronic data base consulted during the international search (name of data base and, where practicable, search terms used) 
Please See Continuation Sheet 


C. DOCUMENTS CONSIDERED TO BE RELEVANT 


Category * 


Citation of document, with indication, where appropriate, of the relevant passages 


Relevant to claim No. 


Y 
Y 

A 


US 5,596,569 A (MADONNA et al.) 21 January 1997 (21.01.1997), col. 1, line 60 - col. 4, 
line 25. 

US 6,260,120 Bl (BLUMENAU et al.) 10 July 2001 (10.07.2001), col. 8, line 22 - col. 10, 
line 67 and col. 23, line 48 - col. 26, line 57. 

US 5,954,799 A (GOHEEN et al.) 21 September 1999 (21.09.1999), see entire document. 


1-4, 7, 8, 11-18 
1-4, 7, 8, 11-18 
1, 15,20, 21,24, 35 


X.P 


US 6,400,730 Bl (LATIF et al.) 04 June 2002 (04.06.2002), col. 2, line 15 - col. 4, line 48 
and col. 6, line 6 - col. 8, line 14. 


1-44 


I | Further documents are listed in the continuation of Box C. 


1 | See patent family annex. 




* Special categories of cited documents: 

"A" document defining the general state of the an which is not considered to be 
of particular relevance 

M E" earlier application or patent published on or after the international tiling date 

"L" document which may throw doubts on priority claim(s) or which is cited to 
establish the publication date of another citation or other special reason (as 
specified) 

"O" document referring to an oral disclosure, use, exhibition or other means 

"P" document published prior to the international filing date but later than the 
priority date claimed 


"T" later document published after the international filing date or priority 
date and not in conflict with the application but cited to understand the 
principle or theory underlying the invention 

"X" document of particular relevance; the claimed invention cannot be 

considered novel or cannot be considered to involve an inventive step 
when the document is taken alone 

"Y" document of particular relevance; the claimed invention cannot be 
considered to involve an inventive step when the document is 
combined with one or more other such documents, such combination 
being obvious to a person skilled in the art 

"&* document member of the same patent family 


Date of the actual completion of the international search 
20 January 2003 (20.01.2003) 


Date of mailing of the international search report 

11 FEB 2003 


Name and mailing address of the ISA/US 

Commissioner of Patents and Trademarks 
Box per 

Washington, D.C. 2023 1 
Facsimile No. (703)305-3230 


Authorized officer f\ t 1 1 
Jason D Cardone \0^^\ 
Telephone No. (703)305-3900 



Form PCIYISA/210 (second sheet) (July 1998) 



WO 03/027886 



Page 113 of 113 



INTERNATIONAL SEARCH REPORT 



PCT/US02/30974 



Continuation of B. FIELDS SEARCHED Item 3: 
EAST (BRS) 

search terms: SAN, protocol, switch, Iinecard, port, fibre channel, ethemet 



Form PCT/1SA/210 (second sheet) (July 1998) 



